last executing test programs: 3.068919352s ago: executing program 1 (id=4111): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000003e0007010300000000000000027c00000400428011000100686d"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000160004010000000000000000000a0000000800ca8004000180"], 0x1c}}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000160004010000000000000000000a0000000800ca8004000180"], 0x1c}}, 0x0) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) (async) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x109001, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'wg1\x00', 0x2000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socket$kcm(0x2d, 0x2, 0x0) (async) r7 = socket$kcm(0x2d, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000040)={0x2d, 0x0, 0x7ffe}, 0xc) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYRES32=r1, @ANYRESDEC=r5], 0x128}, 0x0) (async) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYRES32=r1, @ANYRESDEC=r5], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, 0x0, 0x0) (async) writev(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) (async) ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) 2.901697075s ago: executing program 1 (id=4112): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe8}}, 0x0) 2.825353739s ago: executing program 1 (id=4113): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) (async) 2.823282795s ago: executing program 1 (id=4114): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x170, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xe, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x0, 0x1ff, 0x7fff, 0xa, 0x2, 0x1, 0xfffffffa, 0x6f2, 0x9, 0xb00, 0x17, 0xb, 0x1e, 0x8, 0x7, 0x4}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, 0x0, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c000180060006008035"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendto$packet(r5, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, 0x0, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x12, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000001d0018490000fdffffff0000000000000000b7080000000000007b8af8ff00000000b708000090ffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000000000070400000000182300"/108, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.774394494s ago: executing program 1 (id=4115): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000001b43850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x12, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@map_fd={0x18, 0x3, 0x1, 0x0, r3}, @jmp={0x5, 0x1, 0x4, 0x8, 0x3, 0xfffffffffffffff8, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f00000003c0)='syzkaller\x00', 0xb, 0xfed, &(0x7f0000001780)=""/4077, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) 2.638055918s ago: executing program 1 (id=4116): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a0000140002801000178004003000050001"], 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x800c000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x18}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0xfffffffffffffeb6, &(0x7f0000000180)="6ebe5ec3140551c29c5ccf5552fc", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x89}, 0x24048800) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) recvmsg(0xffffffffffffffff, 0x0, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1400000016000b63d25a8064100094f90224fc05", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$kcm(0x29, 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000040), 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 2.628240176s ago: executing program 0 (id=4118): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}}, &(0x7f0000000200)='GPL\x00', 0xf, 0x79, &(0x7f0000000300)=""/121, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000003145c7c01002abd7000ffdbdf250900020073797a310000000008004100736b770014003300626f6e"], 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x40810) socket$nl_rdma(0x10, 0x3, 0x14) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}}, &(0x7f0000000200)='GPL\x00', 0xf, 0x79, &(0x7f0000000300)=""/121, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000003145c7c01002abd7000ffdbdf250900020073797a310000000008004100736b770014003300626f6e"], 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x40810) (async) 2.472723961s ago: executing program 0 (id=4120): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x38, r1, 0x1, 0x170bd25, 0x255fdbff, {0x39}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x7}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000818}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x4, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008, 0x3ff}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x1) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000f80)=ANY=[@ANYBLOB="dc00000000090104000000000000000005000001a80002000600034000020000060003400004000006000340000000000c00028005000100840000002c00018014000300fe88000000000000000000000000000114000400ff0200000000000000000000000000012c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa07000340000400001400018008000100ac1414bb08000200ac14143b0c00028005000100100000000c00020006000340000300000c00048008000140000000090800064000000001"], 0xdc}, 0x1, 0x0, 0x0, 0x8014}, 0x4000085) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000050000000200000007"], 0x50) close(0x3) r3 = socket$nl_crypto(0x10, 0x3, 0x15) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000880)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(0xffffffffffffffff, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000006040)=""/4086, 0xff6}], 0x1}, 0x8000}], 0x1, 0x10002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000400)={'bond_slave_1\x00', 0x800}) syz_emit_ethernet(0x32, &(0x7f0000000500)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa19080045541a2100010000002f9078ac1e0101ffffffff320088be001090780200000080000000"], 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000140)="cb", 0x1}], 0x1, 0x0, 0xe0}}], 0x1, 0x0) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r6, &(0x7f0000000140), 0x0}, 0x20) pipe(&(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000b00)={'syztnl2\x00', &(0x7f0000000980)={'erspan0\x00', r8, 0x1, 0x1, 0x2aed, 0x9, {{0x10, 0x4, 0x1, 0x8, 0x40, 0x66, 0x0, 0x0, 0x29, 0x0, @multicast2, @empty, {[@rr={0x7, 0x2b, 0xa0, [@dev={0xac, 0x14, 0x14, 0x1}, @multicast1, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @rand_addr=0x64010100, @remote, @multicast2, @empty]}]}}}}}) r9 = socket(0x25, 0x4, 0x80000000) sendmmsg$sock(r3, &(0x7f0000000d80)=[{{&(0x7f0000000000)=@rc={0x1f, @none, 0x8}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000004c0)="72021143b962c6d02495b9651fe37a7227fa3704319a7aaaa958f04a5a60e540445335da53945e2478ff65b82d044a99f824f590eb765ec5fe3e463d98850dee1634fbad8cceed9fc3992d658a2be04cb545ef2ca3177547b1de09678458c0a76aa3c66ae0792606c472cac84528e1f6a5e4288aabc9b52d5bc3fe9341c8ee0dec83aae6c36044468a05fc8d41be3193a5a5e03dd489592a3f292f3021d3f14b76abe14b367815c68893fbab20880093f8410408dc096fe55e2b6294082be2c791e60439fc0a3df4eb008ae9408405bcde7a89b79ece9cebb434cab08f011d6c6841", 0xe2}], 0x1}}, {{&(0x7f0000000600)=@ethernet={0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000680)="db0773080dc4dbcc04a34194c82c76e6e0e72a1ca165ae6a0f2f6cee619764bd26853b102177a3e520a49930bb2da05e0b3d5ab0cc428a1da09d66e7feac3efe71257aed632438", 0x47}, {&(0x7f0000000700)="563b062afe0729aba00ae6cd715007dad022ef478cbf7d52eb102259cdeeb886847bbe985f19a13b3d7b2e5fd2ce1ba8b6d052b05e67fea3686d68b2e7f27ab786af5f88d644d863c08b22bf4fe1dc5348aca1255d690f5b808f69e198235abc0368c1a383f7b96a84f8a9fcf8a64d681a73b374b82993acebcc8a413adb319b629132ef1aca36d84458ab15bc76fdcdfa8505b7947feb301dc69514711e861164aaeb3869d24a8d99a05b9dc535a421bc821cdb1bbc7e2d83361a", 0xbb}, {&(0x7f00000007c0)="b90f64eb73cf64bd37aca47f98524dcb09c1c14fe4863cd5518f630e8b3dd9717f753d12429f0e6e311c1ecef003a06df2bf2d9ded9141545d581fe2d1faebc3dddb67c96dab9bc38ec790ad6c6b2ac8896eacd13d5dda82492be4232980ac53c20aeb13dc510e5ce4130c503005d43f16b2be89ad58120ac3f92b88d58f4513126ede9123e60e82e0fd08209b6cfd80ea", 0x91}, {&(0x7f0000000880)="9bd6e69c4317a9fd23a8cc3ef8104ef6386f13fd2ca988", 0x17}, {&(0x7f00000008c0)="c1e4d99fac300cd818caa99874ec7d02bda011f12f85542d9bbfee0576b311b223318016c3ed3dfca44726f9d6d89a7304c9638178e14865fbdb0af12caa08544505c32cf2a27f7492941274bdc9c22f8f10ab500207b895f0e14511282f57a36d3c8afb136dc77c3f4a1b620f3988c434145defc5fa4beec331c1521a4c4e0f429550fafff4b1103cfa2265e7cf5df1210cd6342c", 0x95}], 0x5}}, {{&(0x7f0000000a00)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x1, 0x3, 0x3, 0x4, {0xa, 0x4e22, 0xffffeffc, @local, 0x59}}}, 0x80, &(0x7f0000000a80)=[{0xffffffffffffffff}], 0x1, &(0x7f0000000e80)=[@timestamping={{0x14, 0x1, 0x25, 0xb30}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x2cd2}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0xba2}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0xaf22}}], 0xc0}}, {{&(0x7f0000000bc0)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e23}}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c40)="7514417dabe684f997e955e01cab2d1906a6ce0b368a80968ba0789fc2c795b345026c", 0x23}, {&(0x7f0000000c80)="6d66c6bbd5dd79c6c3b67c70bf838d31ddb270917f9ed7ed8c465ce246752360bbba4e443a31e15775cab2df6eaf61de19b060bf2dc9a6b5a4ea2c1ae38688bb06436d2327c52e92b64965db4c1e352d7d66723df389e525e803a0c7a529246f8169f0bf1241f12e19e7fa3a89954acd82d2c262496a31c0413becb9ae415100ee14306741deb5114dd00bf8a2157667007bf2b6238a", 0x96}], 0x2}}], 0x4, 0x24004091) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000ac0)={r10}, 0xc) socket(0x3, 0x8000b, 0x540) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 2.032691476s ago: executing program 4 (id=4126): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e0048000b000000420000003e19c7a30e848bd53f758b6acb54c0986f3f4d51035ac9e88d4483451c6a"], 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r6, &(0x7f0000000380)=ANY=[@ANYRESOCT], 0x141) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0xfffffffffffffe5a) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r9, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000ffffffaaaaaaaaaabb080045000043fffe0000002f9078ac1e0001e000000100fc85dd002f90782104000196e3c7f9685ad9421db3fd553537a34000eec6bb21c7a195f93c7c8bf8187d4625086d"], 0x55) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r8, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r12}, 0x4) (async) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r13, 0x0, 0x37, 0x0, &(0x7f00000006c0)="3d25ff070d001000000000c186ddef00000080657a769d83e6df9285000000000000000000000000b50a65f3acd75983ca59f98920400f", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0x3) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0xc}, 0x94) (async, rerun: 64) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) (rerun: 64) 1.969396496s ago: executing program 3 (id=4127): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x16}, 0x8) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)=@nfc, 0x80, &(0x7f0000000380)=[{&(0x7f0000000340)=""/50, 0x32}], 0x1}, 0x1000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000280)={{0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'nq\x00', 0x1d, 0xfffffffe, 0x2a}, {@loopback, 0x4e23, 0x2000, 0xc24, 0x9, 0xfffffff9}}, 0x44) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x5000, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="08001efbb07d586e", 0x2a}, {0x0, 0xb80b}], 0x2, 0x0, 0x0, 0x60000000}, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000008000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4c20, 0x3, @loopback, 0x80020}, 0x1c, &(0x7f0000000540)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000740)=ANY=[@ANYBLOB="12e01b3989dd1341"], 0x1000f) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000009a670103000000000000000000000002050001000700000009000200735b7a300000000004000780050005000200000005000400000000000d0003006c6973743a73657400007619"], 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x4004010) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x11, 0x3, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x5c}, &(0x7f0000000080)=0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000280)={r8, 0x66, "fd4bb0df12149db84057e480806c2dc3f430f734ae19b44df8d9a17a20a6c2b1c3449ab36d7dd28bc00eb7788ebdb48cc67e0d869786ee8055322c1210a912b3a9c6765aca60cdae5aae4e74394ae360307dad7c3f7f3304967fbe8e3e61029e52a408f23345"}, &(0x7f0000000140)=0x6e) 1.704586364s ago: executing program 3 (id=4129): socket$packet(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) write$cgroup_devices(r1, 0x0, 0x9) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = socket(0x21, 0x1, 0x3) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x40, r9, 0x1, 0x70bd28, 0x40, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000001640), 0x0, 0x34000, 0x0) r10 = socket(0x2b, 0x1, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f00000002c0)=@broute={'broute\x00', 0x20, 0x29, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000200], 0x0, 0x0, &(0x7f0000000200)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r11, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002bbd700000080000010014000c00050022010000000000000d007400074dc653a5d2587200"/54], 0x3c}}, 0x400400c) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003080)=@newtfilter={0x8b8, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x884, 0x2, [@TCA_MATCHALL_ACT={0x880, 0x2, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x7, 0x100, 0x2, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x3, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10003, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x9, 0xfffffffd, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x18, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xb, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x0, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0x4, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xfffeffff, 0x2, 0xffff, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x2, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94b, 0x9, 0x8, 0x6, 0x100, 0x2, 0xffff, 0x4, 0x2, 0x3ff, 0x2, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ffb, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0xff, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x8000007, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x1, 0x8, 0x50, 0xf, 0xf, 0xe, 0x6, 0x0, 0x81, 0xfff80000, 0x0, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x0, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0x4000fff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0x1ff, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0xc000, 0xffffff97, 0x2, 0x40, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0xfff, 0xe, 0x3, 0x9, 0xa, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x20000000, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0xb}, {0x6, 0x2, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x49}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x8b8}, 0x1, 0x0, 0x0, 0x10}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 1.633080136s ago: executing program 2 (id=4131): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000000, 0x39071, 0xffffffffffffffff, 0x65969000) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000001680)=""/256, 0x100, 0x1120, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000000160004000000000000000000fe880000000000000000000000000001ff0100000000000000000000000000010000000000000082000000002b000000", @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r0], 0xf8}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1.489714544s ago: executing program 2 (id=4132): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x4, 0xb}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x5000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20010) 1.284429362s ago: executing program 2 (id=4133): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x6, 0x2}, {0x0, 0xfff1}, {0x2, 0x2}}, [{0x8, 0xb, 0xfffffffe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040851}, 0x4045080) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x6) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f020004000000000000000058000b4824ca945f64009400ff0325010ebc000b00000000008000f0fffeffe809005300", 0x42}], 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) read$alg(r6, &(0x7f0000000b80)=""/237, 0xed) bpf$OBJ_GET_MAP(0x7, 0x0, 0x1b) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8) sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r8, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0x6e}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4091, 0xffb}], 0x3}}], 0x1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r10 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r10, &(0x7f0000006140)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000002500)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}, {{&(0x7f0000002600)=@abs, 0x6e, &(0x7f0000002a40)=[{&(0x7f0000003100)=""/4080, 0xff0}], 0x1}}, {{&(0x7f0000002d00), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000002d80)=""/136, 0x88}, {0x0}], 0x2}}], 0x3, 0x0, 0x0) sendmmsg(r10, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB="020000000000d8ae4904db09e8217856cddd175a5f0d6f68627b86b02360ee68ffd937000100000000000d67002b0a9c1f1c405bd22ce49ab1c395891eb095457d14e0470f6857da308a3af07a93127249f1d5dd36d56f9be2787054ffffffa78822d0dcfcfd19d385334e75e0bbe4eeccb084893d90ccfd5e5c33a9bfd93316b5fe3b33d3950fc86fc59cc993b2f8df8431fd8d1b71b044d4f08952ed851aa7d8b5a8fcf3e7ecc89067bf15f0ad4cd6cde2e17b9caaac1ba24118af384e1d8d8da1078c27619ef3a47efde7dd46b58c1e27586d9da008e381df12c93f0f9fff4c65d74673225f8b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 1.105891089s ago: executing program 4 (id=4134): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000300)=@ethtool_dump={0x3e, 0xed, 0x2}}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'dummy0\x00', 0x4000}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b1b, &(0x7f0000000040)) 997.430451ms ago: executing program 4 (id=4135): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000640)="dbca", 0x2}], 0x1}}], 0x1, 0x8000) sendmmsg(r1, &(0x7f0000005980)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=':48', 0x3}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1000000000000000040100000400000010000000000000000c0100000000000048000000000000000901000008000000fa4344e6a1f8221270ed8aa446d5d16888ccdd652a5194af0862eee02e7d990494c6a9e92535c5d49ad7a335e58ca61c98340000000000397a"], 0x78}}], 0x1, 0x4044845) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2000000000000000ac141416ac1414169a179424", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000040)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) 856.833893ms ago: executing program 4 (id=4136): mmap(&(0x7f0000510000/0x4000)=nil, 0x4000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0xeddaa000) (async) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) 856.217434ms ago: executing program 0 (id=4137): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000630000dd000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x13, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23) (async, rerun: 32) syz_emit_ethernet(0x92, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ee527a", 0x5c, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@routing={0x84, 0x2, 0x1, 0x4, 0x0, [@private0]}], {{}, {}, {}, {0x8, 0x88be, 0x1}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}}, 0x0) (async, rerun: 32) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x635e}, [@call={0x85, 0x0, 0x0, 0x11}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000d100000000000000000000730141000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xcb, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r2, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004085}, 0x800) 828.158326ms ago: executing program 4 (id=4138): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="020300000c00000000120000fdffffff030006000000000002004e210a0101020000000000000000020001000000000000ebff0b00000000030005000000000002004e21640101010000000000000000020013"], 0x60}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, r4}, 0x40) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000005000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb70300008a000000b704000000000000850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000080)=r7) 774.198161ms ago: executing program 0 (id=4139): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) (async) sendmsg$can_bcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x5, 0x480, 0x8, {}, {0x77359400}, {0x4, 0x0, 0x1, 0x1}, 0x1, @can={{0x1, 0x0, 0x1, 0x1}, 0x1, 0x1, 0x0, 0x0, "da96af2fcead2a68"}}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20000051) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300008000000113d4317daefb5837f09516f0a6d8892eab503dd0db11db6ad8cf88e08e1ef71c3fb00"/54, @ANYRES32=0x0, @ANYBLOB="900000000008000008000a00", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x4000880) (async) r5 = socket$inet6(0xa, 0x5, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$unix(0x1, 0x2, 0x0) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r9, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x7ff, 0x71}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_macvtap\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) (async) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100fec0000000000000080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x400c044) (async) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) listen(r5, 0x50) (async) r11 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r11, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @empty, 0x4}, 0x1c) (async) listen(r11, 0x50) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00'}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 729.235708ms ago: executing program 3 (id=4140): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x54}}, 0x0) 640.030014ms ago: executing program 3 (id=4141): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0f00000004000000040000001600000000000000", @ANYRES32, @ANYBLOB="2abdac9be163a604000000000000000000000400", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) (async) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) (async) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x6, 0x2, 0x5, {r4, r5/1000+10000}, {r6, r7/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x1, 0x0, 0x1}, 0x1e, 0x0, 0x0, 0x0, "b6cebd0e42549de0b6552291b3b78396f424ddfeee39725f534bf56841ab1283fbc6059b8e44bf08ea0d5feeb8dc363cbf34671b2b4ebaf272100efc5b9d7e78"}}, 0x80}, 0x1, 0x0, 0x0, 0xc080}, 0x24024010) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r9, 0x106, 0x1, &(0x7f00000000c0)=0x1, 0x4) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des)\x00'}, 0x58) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) (async) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000080)="e64f2be8d3e7a2aa", 0x8) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES32=r8, @ANYBLOB="05"], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) (async) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000500)=[{&(0x7f00000000c0)="c1be7355e613a8ade99871d6ec5dfb0b1bfd5d611b12f598d9c597904be50ea2989a8dbac716cb76cee029cddf1c7e0563edc4b6e7079728cdce9e72908648", 0x3f}, {&(0x7f0000000100)="aafe983807d45a0c33c9d99161e8621f5ac8946bf73335802e72ed4b15ea2514c12ab33bf365771e2142e178620e5cacd11dcc7279", 0x35}, {&(0x7f00000001c0)="e44c0ae8e59a5ce0d30196711978f6e02f797091e4caaa2cf6af1571de58fd66becf8b8f66c6f47d3023b203351d97d83e61cc62c401f27a769e1f28fd0f984b13a2c3c3d8f6d92051435bfafe5dd41b3e737217cc66be1b83e2391c19765ffadfb758ac5d0cc3ec3f7ffd8fe5ccd18af4df1465f5149d1c45cc6361069fa0152af76dbe2ce040eeacccf23fc1cb5201593b16ac9312f338aff1121abda25523ef6cef589d11df4e7dea489790e27645fe28767f425ee2040613e1bec053fb47ead9", 0xc2}, {&(0x7f00000002c0)="70f753677485a94d183d89cb593cd19e5d7a1a6a99f43c7100ec6d1f7bd3744e9c64642d1fa4", 0x26}, {&(0x7f0000000440)="0fe29447bee0ea7f843512d969ad58e9ed1f66e22b601b00034af1ae37954074b62a4f2f0da8407e0c85febc1d09a4e105a885c1ea0c0522504aef90cfd2660e154d1b9ef774c9a31b0b89844101a30c2c7811f9aeffa0aecc61ac46163e668b7b3d341a491995e827f3c24870afb7e3b01b614baf7da4f6e2bdc30b9bd6ae25b95c7286881524f01a958d5c4c55957e4aeb55c39b6378e43de52a55704629c88976eebfa2bd", 0xa6}], 0x5}, 0x400c001) (async) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 606.453562ms ago: executing program 4 (id=4142): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000050000000200000007"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x6, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r5}, 0xc) r6 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r6, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r1, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f00000002c0)=0x840, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@ipv4_delrule={0x30, 0x21, 0x9, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10014}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'ip6gre0\x00'}]}, 0x30}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000020000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r7, 0xe0, &(0x7f0000004880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 593.25596ms ago: executing program 3 (id=4143): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8004, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x2, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x14, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x7d, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x5, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffbff, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x7, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0xfffffffe]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x4, 0x5, 0xd, 0x2, 0x8001, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x4, 0xd7da, 0x82, 0xd, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x5, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x12, 0x4, 0x0, 0x2, 0x43d, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x3, 0xd, 0xfb6, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000001800ef012bbd7000000000000a200000fc00000500000000140005000000000000000000000000000000000108000400", @ANYRES32=r5, @ANYBLOB="a059c8102875950d378fe430e0d6b3f5b7426cf141b173b044c881b6fbf026a99e24d8d8acaf8b53ea0b5fabc881890f949329de84a9542d64"], 0x38}, 0x1, 0x11}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x2f, 0x9, 0xf, 0x8, 0x3b, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x1, 0x5828000, 0x100}}) (async) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0), &(0x7f00000002c0)=0xc) sendmsg$nl_route(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000000200)=@mpls_delroute={0x60, 0x19, 0x10, 0x70bd27, 0x25dfdbff, {0x1c, 0x80, 0x0, 0x7, 0xfc, 0x0, 0x7e, 0x0, 0x2200}, [@RTA_MULTIPATH={0xc, 0x9, {0x4, 0x22, 0x1, r3}}, @RTA_OIF={0x8, 0x4, r5}, @RTA_VIA={0x14, 0x12, {0x22, "04a73dacba7d088b9143ac06302f"}}, @RTA_TTL_PROPAGATE={0x5}, @RTA_VIA={0x14, 0x12, {0x11, "7a78a4935599ec93b3fefe8cec58"}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) 544.958337ms ago: executing program 0 (id=4144): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="180000004000000000000000ffffffff180100002020782500000000002020207b"], 0x0, 0x8, 0x0, 0x0, 0x40e00, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fd}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x20}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180002000000000000000000000000009500400000780000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r4, 0x0, 0x25, 0x2, @void}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000076c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) r6 = socket$alg(0x26, 0x5, 0x0) ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, &(0x7f0000000100)) bind$alg(r6, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newtaction={0x14, 0x76, 0x1, 0x70bd2b, 0x25d7dbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r6, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)=""/88, 0x58}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000110000007b8af0ff00000000b70800000d0000007b8af0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000000feffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 348.698118ms ago: executing program 2 (id=4145): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="fc00000018000703ab092500090007000a07b800000000060000369321000700ff2500000005d00000000000000398996c92773411419da79bb94b46fe000000bc00020000036c6c256f1a272f2e117c22ebc205214000000000008934d07302ad031720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70c9ddefefe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000010000000f00000008000300", @ANYRES32=r3, @ANYBLOB="0500330002000000080032000700000008003100fc030000080034"], 0x44}}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r4) r5 = getpid() sendmsg$unix(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000240)='CJ', 0x2}], 0x1, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r5, 0xee01, 0xee01}}}], 0x20, 0x10}, 0xa8d1) write$cgroup_pid(r4, &(0x7f0000000400), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @flow_dissector}, 0x94) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x18, 0x1416, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'macvlan1\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x37, "04000787b600eca6aa0825471829a00700e54b93e707f95f5e8bc0e7b3635240e82fa543d570618759f179f34900"/55}}) r8 = socket$inet(0x2, 0x2, 0x1) r9 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r9, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xfffffffffffffdba) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0x1, &(0x7f0000000080)=0x4, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x14, 0x3, 0x8, 0x7, 0x141, 0xffffffffffffffff, 0xfca1}, 0x50) sendto$inet(r8, 0x0, 0x0, 0x440d4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x100, &(0x7f0000000400)=""/256, 0xb6df4c32c1d5c814, 0x31, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) 346.224882ms ago: executing program 3 (id=4146): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newsa={0x1e4, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@private, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, {0x3bc7, 0x7, 0x80000004}, {0x2, 0x0, 0xffffffff}, 0x70bd2d, 0x800000, 0x2, 0x4, 0x0, 0x4c}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a}}, @algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}, @algo_auth_trunc={0x8d, 0x14, {{'hmac(sha256)\x00'}, 0x208, 0x80, "aef356316f6f7d6ab0f8637b42ff0300008aa309bdd3f9dcffb669556b74c61e032441fd13571c4c64597441f3cf2a548c89a004673b82b4618529a52c676f7c94"}}]}, 0x1e4}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x54, r0, 0x1, 0x0, 0xfffffffc, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x54}}, 0x800) 282.472381ms ago: executing program 0 (id=4147): mmap(&(0x7f000002c000/0x4000)=nil, 0x4000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x4932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f0000002940), &(0x7f0000000500)=""/145}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$kcm(0x29, 0x0, 0x0) shutdown(r3, 0x1) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) 136.691146ms ago: executing program 2 (id=4148): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x30}}], 0x1, 0x4000) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x5, 0x1ff001, 0x7f, 0x7b, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r2, 0x0, 0x0, 0x604000000000000}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0xac, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x84, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x96}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x4c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x1c, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "db394d165f3efc27582576304d8822a300"}]}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x120}}, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0xc0}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 0s ago: executing program 2 (id=4149): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x6c, 0x10, 0x401, 0x0, 0xf, {0x0, 0x0, 0x0, 0x0, 0x40000, 0xce5ba66a3b447375}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x6d}, @IFLA_GRE_FLAGS={0x8, 0xd, 0xedb0}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x6}, @IFLA_GRE_TTL={0x5, 0x8, 0x1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x9}]}}}]}, 0x6c}}, 0x40000) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req3={0x6, 0x6, 0x40, 0xfff, 0x1, 0x5, 0x2611}, 0x1c) kernel console output (not intermixed with test programs): syzkaller0> [ 338.762914][T17692] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 338.818314][T17692] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 338.850228][T17692] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 338.883709][T17692] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 338.908094][T17692] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 338.936708][T17692] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 338.974275][T17692] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 339.011491][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 339.018003][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 339.028038][T17832] netlink: 'syz.4.3053': attribute type 1 has an invalid length. [ 339.036629][T17692] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 339.148512][T17832] 8021q: adding VLAN 0 to HW filter on device bond4 [ 339.157821][T17803] netlink: zone id is out of range [ 339.183612][T17803] netlink: zone id is out of range [ 339.197389][T17833] block nbd1: NBD_DISCONNECT [ 339.206906][T17803] netlink: zone id is out of range [ 339.221478][T17833] block nbd1: Send disconnect failed -32 [ 339.226385][T17803] netlink: zone id is out of range [ 339.240224][T17833] block nbd1: shutting down sockets [ 339.251262][T17803] netlink: zone id is out of range [ 339.258389][T17830] bond4: (slave veth3): Enslaving as an active interface with a down link [ 339.267173][ C0] blk_print_req_error: 138 callbacks suppressed [ 339.267194][ C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.282659][ C0] buffer_io_error: 138 callbacks suppressed [ 339.282679][ C0] Buffer I/O error on dev nbd1, logical block 0, async page read [ 339.288183][T17803] netlink: zone id is out of range [ 339.288633][ C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.310630][ C0] Buffer I/O error on dev nbd1, logical block 1, async page read [ 339.318436][ C0] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.327578][ C0] Buffer I/O error on dev nbd1, logical block 2, async page read [ 339.335379][ C0] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.344513][ C0] Buffer I/O error on dev nbd1, logical block 3, async page read [ 339.363150][ T9581] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.376284][ T9581] Buffer I/O error on dev nbd1, logical block 0, async page read [ 339.388625][ T9581] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.399170][ T9581] Buffer I/O error on dev nbd1, logical block 1, async page read [ 339.417022][T17831] bond4: (slave veth5): Enslaving as an active interface with a down link [ 339.421878][ T9581] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.442922][ T9581] Buffer I/O error on dev nbd1, logical block 2, async page read [ 339.455265][T17823] bridge0: left promiscuous mode [ 339.462903][ T9581] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.484663][ T9581] Buffer I/O error on dev nbd1, logical block 3, async page read [ 339.502650][T17823] wg1: left promiscuous mode [ 339.545569][ T9581] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.587183][ T9581] Buffer I/O error on dev nbd1, logical block 0, async page read [ 339.612925][ T9581] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.645145][ T9581] Buffer I/O error on dev nbd1, logical block 1, async page read [ 339.687883][ T9581] ldm_validate_partition_table(): Disk read failed. [ 339.716107][ T9581] Dev nbd1: unable to read RDB block 0 [ 339.759262][ T9581] nbd1: unable to read partition table [ 339.808245][ T9581] ldm_validate_partition_table(): Disk read failed. [ 339.868377][ T9581] Dev nbd1: unable to read RDB block 0 [ 339.906487][T17863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3055'. [ 339.916594][ T9581] nbd1: unable to read partition table [ 339.957898][T17870] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3058'. [ 339.973129][ T49] Bluetooth: hci3: command tx timeout [ 340.032645][T17870] gretap0: entered promiscuous mode [ 340.138795][T17692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.207474][T17692] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.225871][T10964] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.233345][T10964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.307112][T10964] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.314895][T10964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.438177][T17896] netlink: 'syz.2.3063': attribute type 11 has an invalid length. [ 340.606561][T17904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3067'. [ 340.645415][T17904] bond0: Caught tx_queue_len zero misconfig [ 340.671975][T17904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3067'. [ 340.687495][T17909] netlink: 'syz.0.3068': attribute type 1 has an invalid length. [ 340.689627][T17913] raw_sendmsg: syz.1.3066 forgot to set AF_INET. Fix it! [ 340.715391][T17909] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3068'. [ 340.742028][T17909] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3068'. [ 340.762235][T17909] netlink: 658 bytes leftover after parsing attributes in process `syz.0.3068'. [ 340.939551][T17928] sctp: [Deprecated]: syz.1.3070 (pid 17928) Use of int in max_burst socket option. [ 340.939551][T17928] Use struct sctp_assoc_value instead [ 340.964310][T17929] pim6reg: entered allmulticast mode [ 341.119108][T17692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.147629][T17944] dvmrp0: entered allmulticast mode [ 341.175140][T17692] veth0_vlan: entered promiscuous mode [ 341.189041][T17692] veth1_vlan: entered promiscuous mode [ 341.226016][T17692] veth0_macvtap: entered promiscuous mode [ 341.228699][T17946] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3074'. [ 341.245446][T17692] veth1_macvtap: entered promiscuous mode [ 341.247800][T17946] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3074'. [ 341.290959][T17692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.315159][T17692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.329743][T10956] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.343191][T10956] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.354473][T10956] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.378817][T10956] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.051869][ T49] Bluetooth: hci3: command tx timeout [ 343.171652][ C1] net_ratelimit: 7 callbacks suppressed [ 343.171675][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 343.183904][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 343.885750][T17929] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 343.959771][T10954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.979908][T10954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.049317][T10957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.062883][T10957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.132552][ T49] Bluetooth: hci3: command tx timeout [ 344.205569][T17985] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3081'. [ 344.215589][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 344.215663][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 344.528019][ T4938] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 344.537465][ T4938] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 344.546199][ T4938] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 344.554477][ T4938] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 344.562669][ T4938] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 344.728221][T10957] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.780302][T10957] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.833609][T10957] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.900473][T10957] netdevsim netdevsim1 €Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.923374][T18018] sctp: [Deprecated]: syz.0.3088 (pid 18018) Use of struct sctp_assoc_value in delayed_ack socket option. [ 344.923374][T18018] Use struct sctp_sack_info instead [ 344.943436][T18018] __nla_validate_parse: 1 callbacks suppressed [ 344.943457][T18018] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3088'. [ 345.208549][T10957] bond10 (unregistering): (slave geneve4): Releasing active interface [ 345.247472][T10957] bond0 (unregistering): Released all slaves [ 345.253721][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 345.253791][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 345.279574][T10957] bond1 (unregistering): Released all slaves [ 345.290564][T10957] bond2 (unregistering): Released all slaves [ 345.301795][T10957] bond3 (unregistering): Released all slaves [ 345.317366][T10957] bond4 (unregistering): Released all slaves [ 345.329199][T10957] bond5 (unregistering): Released all slaves [ 345.342522][T10957] bond6 (unregistering): Released all slaves [ 345.356596][T10957] bond7 (unregistering): Released all slaves [ 345.370207][T10957] bond8 (unregistering): Released all slaves [ 345.381565][T10957] bond9 (unregistering): Released all slaves [ 345.393443][T10957] bond10 (unregistering): Released all slaves [ 345.405506][T10957] bond11 (unregistering): Released all slaves [ 345.424566][T10957] bond12 (unregistering): (slave veth11): Releasing active interface [ 345.434281][T10957] bond12 (unregistering): Released all slaves [ 345.445247][T10957] bond13 (unregistering): Released all slaves [ 345.532660][T10957] : left promiscuous mode [ 345.589907][T10957] tipc: Disabling bearer [ 345.595497][T10957] tipc: Disabling bearer [ 345.602674][T10957] tipc: Left network mode [ 345.710561][T18004] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.718018][T18004] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.726825][T18004] bridge_slave_0: entered allmulticast mode [ 345.738331][T18004] bridge_slave_0: entered promiscuous mode [ 345.747731][T18004] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.755106][T18004] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.762983][T18004] bridge_slave_1: entered allmulticast mode [ 345.770222][T18004] bridge_slave_1: entered promiscuous mode [ 345.802090][T18004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.817413][T18004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.850718][T18004] team0: Port device team_slave_0 added [ 345.859828][T18004] team0: Port device team_slave_1 added [ 345.887768][T18004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.895221][T18004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.922656][T18004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.936670][T18004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.943762][T18004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.970028][T18004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.017440][T18004] hsr_slave_0: entered promiscuous mode [ 346.024104][T18004] hsr_slave_1: entered promiscuous mode [ 346.031584][T18004] debugfs: 'hsr0' already exists in 'hsr' [ 346.037387][T18004] Cannot create hsr debugfs directory [ 346.291516][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 346.298087][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 346.318295][T10957] hsr_slave_0: left promiscuous mode [ 346.324619][T10957] hsr_slave_1: left promiscuous mode [ 346.337213][T10957] veth0_macvtap: left promiscuous mode [ 346.343862][T10957] veth1_vlan: left promiscuous mode [ 346.349197][T10957] veth0_vlan: left promiscuous mode [ 346.611972][ T4938] Bluetooth: hci2: command tx timeout [ 346.809502][T10957] IPVS: stop unused estimator thread 0... [ 347.059433][T17972] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 347.072281][T18035] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3091'. [ 347.187462][T18004] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 347.223800][T18004] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 347.238245][T18004] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 347.269634][T18004] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 347.309775][T18004] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 347.331417][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 347.337907][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 347.366911][T18004] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 347.409353][T18004] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 347.446019][T18004] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 347.500773][T18070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.587103][T18074] bond1: Unable to set down delay as MII monitoring is disabled [ 347.598336][T18074] bond1 (unregistering): Released all slaves [ 347.632102][T18089] netlink: 'syz.2.3101': attribute type 1 has an invalid length. [ 347.650132][T18081] bond1: Unable to set down delay as MII monitoring is disabled [ 347.660047][T18081] bond1 (unregistering): Released all slaves [ 347.686626][T18097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3100'. [ 347.771884][T18096] gretap2: entered allmulticast mode [ 347.780306][T18096] bond10: (slave gretap2): making interface the new active one [ 347.790442][T18096] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 347.824895][T18104] SET target dimension over the limit! [ 347.948970][T18004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.010436][T18116] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3105'. [ 348.015098][T18004] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.057382][T10958] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.064692][T10958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.125639][T18119] bond1 (unregistering): Released all slaves [ 348.153799][T10954] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.161032][T10954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.173020][T18116] syzkaller1: entered promiscuous mode [ 348.179877][T18116] syzkaller1: entered allmulticast mode [ 348.371509][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 348.378000][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 348.560339][T18004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.594570][T18004] veth0_vlan: entered promiscuous mode [ 348.607517][T18004] veth1_vlan: entered promiscuous mode [ 348.631484][T18004] veth0_macvtap: entered promiscuous mode [ 348.640385][T18004] veth1_macvtap: entered promiscuous mode [ 348.655771][T18004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.670191][T18004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.683370][T10953] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.699675][T10953] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.703215][ T4938] Bluetooth: hci2: command tx timeout [ 348.713505][T10953] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.725434][T10953] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.763144][T10953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.771078][T10953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.798305][T10964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.806651][T10964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.953307][T18143] gre1: entered allmulticast mode [ 349.411550][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 349.417998][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 350.451487][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 350.457991][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 350.771538][ T4938] Bluetooth: hci2: command tx timeout [ 351.491584][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 351.498064][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 352.532082][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 352.538541][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 352.851524][ T4938] Bluetooth: hci2: command tx timeout [ 353.571548][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 353.578197][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 354.611626][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 354.618091][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 355.651501][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 355.658213][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 356.691508][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 356.697953][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 357.731497][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 357.737943][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 358.771570][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 358.777997][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 359.811540][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 359.818055][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 360.852309][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 360.858780][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 361.891511][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 361.897974][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 362.931501][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 362.938023][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 363.971577][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 363.978011][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 365.011549][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 365.017975][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 366.051541][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 366.057985][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 367.091487][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 367.098017][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 368.131503][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 368.138025][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 369.171810][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 369.178300][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 370.211506][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 370.217964][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 371.251538][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 371.257979][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 372.291554][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 372.298031][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 373.331503][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 373.337946][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 374.371582][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 374.378075][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 375.411495][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 375.417983][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 376.451555][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 376.458007][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 377.491992][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 377.498481][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 378.541547][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 378.547987][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 379.571619][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 379.578064][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 380.611538][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 380.617990][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 381.651608][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 381.658056][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 382.691515][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 382.697956][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 383.731601][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 383.738040][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 384.771544][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 384.777968][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 385.811788][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 385.818373][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 386.851552][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 386.858013][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 387.891601][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 387.898100][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 388.931551][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 388.938013][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 389.971558][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 389.978063][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 391.011514][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 391.017974][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 392.051648][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 392.058097][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 393.091478][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 393.097951][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 394.132431][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 394.138897][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 395.171498][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 395.178073][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 396.211500][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 396.218056][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 397.251471][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 397.258041][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 398.291514][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 398.298022][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 399.331472][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 399.337957][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 400.371530][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 400.377998][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 401.411543][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 401.418045][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 402.461627][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 402.468116][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 403.491485][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 403.497955][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 404.531483][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 404.537950][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 405.214091][T18165] xt_hashlimit: size too large, truncated to 1048576 [ 405.229775][T18165] xt_hashlimit: max too large, truncated to 1048576 [ 405.396689][T18168] netlink: 'syz.1.3108': attribute type 1 has an invalid length. [ 405.426726][T18173] x_tables: duplicate underflow at hook 3 [ 405.470502][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 405.479038][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 405.486535][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 405.497190][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 405.507549][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 405.541239][T18179] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 405.571402][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 405.577886][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 405.855277][T18199] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3118'. [ 405.867450][T18199] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3118'. [ 405.877668][T18199] netlink: 'syz.1.3118': attribute type 2 has an invalid length. [ 405.886841][T18199] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3118'. [ 405.975900][T18190] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 406.437350][T18222] tipc: Started in network mode [ 406.450052][T18222] tipc: Node identity ac14140f, cluster identity 4711 [ 406.469301][T18222] tipc: New replicast peer: 255.255.255.255 [ 406.502628][T18222] tipc: Enabled bearer , priority 10 [ 406.611443][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 406.617957][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 406.895151][T10953] pim6reg: left allmulticast mode [ 407.408249][T18281] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3134'. [ 407.457113][T10953] bond10 (unregistering): (slave gretap2): Releasing active interface [ 407.511200][T18288] IPVS: set_ctl: invalid protocol: 98 172.20.20.35:21 [ 407.529806][T18288] xt_hashlimit: size too large, truncated to 1048576 [ 407.575053][ T4938] Bluetooth: hci0: command tx timeout [ 407.651429][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 407.658019][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 407.682116][T10953] team0: Port device bridge2 removed [ 407.695233][T10953] bond4 (unregistering): (slave bridge0): Releasing backup interface [ 407.812531][T10953] bond0 (unregistering): Released all slaves [ 407.822325][T10953] bond1 (unregistering): Released all slaves [ 407.832965][T10953] bond2 (unregistering): Released all slaves [ 407.847513][T10953] bond3 (unregistering): Released all slaves [ 407.860612][T10953] bond4 (unregistering): Released all slaves [ 407.872266][T10953] bond5 (unregistering): (slave veth7): Releasing active interface [ 407.882604][T10953] bond5 (unregistering): Released all slaves [ 407.895165][T10953] bond6 (unregistering): (slave veth9): Releasing active interface [ 407.906676][T10953] bond6 (unregistering): Released all slaves [ 407.918796][T10953] bond7 (unregistering): Released all slaves [ 407.929882][T10953] bond8 (unregistering): Released all slaves [ 407.941130][T10953] bond9 (unregistering): Released all slaves [ 407.952888][T10953] bond10 (unregistering): Released all slaves [ 407.981034][ T5284] 8021q: adding VLAN 0 to HW filter on device eth1 [ 407.994538][ T5721] tipc: Node number set to 2886997007 [ 408.067463][T10953] tipc: Disabling bearer [ 408.094296][T10953] tipc: Left network mode [ 408.126348][T10953] IPVS: stopping backup sync thread 9073 ... [ 408.208571][T18304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3137'. [ 408.221068][T18297] syzkaller0: entered promiscuous mode [ 408.229577][T18297] syzkaller0: entered allmulticast mode [ 408.336197][T18313] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3138'. [ 408.440832][T18294] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 408.508864][T18322] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3139'. [ 408.607387][T18331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3140'. [ 408.655312][ T5284] 8021q: adding VLAN 0 to HW filter on device eth2 [ 408.665690][T18331] netlink: 'syz.1.3140': attribute type 13 has an invalid length. [ 408.691427][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 408.697899][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 408.714297][T18331] netlink: 'syz.1.3140': attribute type 17 has an invalid length. [ 408.928430][T18331] gre1: left allmulticast mode [ 408.943426][T18343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3143'. [ 409.078005][T18346] netlink: 'syz.1.3144': attribute type 1 has an invalid length. [ 409.102970][T18352] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 409.115599][T18346] netlink: 280 bytes leftover after parsing attributes in process `syz.1.3144'. [ 409.367061][T18177] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.398319][T18177] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.423454][T18383] xt_CT: You must specify a L4 protocol and not use inversions on it [ 409.426874][T18177] bridge_slave_0: entered allmulticast mode [ 409.469512][T18177] bridge_slave_0: entered promiscuous mode [ 409.494463][T18375] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.501964][T18375] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.539054][T10953] hsr_slave_0: left promiscuous mode [ 409.558734][T10953] hsr_slave_1: left promiscuous mode [ 409.651436][ T4938] Bluetooth: hci0: command tx timeout [ 409.732022][ T4938] Bluetooth: hci1: command 0x0401 tx timeout [ 409.822137][T18177] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.830329][T18177] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.839281][T18177] bridge_slave_1: entered allmulticast mode [ 409.848207][T18177] bridge_slave_1: entered promiscuous mode [ 409.873950][ T5284] 8021q: adding VLAN 0 to HW filter on device eth3 [ 409.899849][T18177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.952293][T18177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.033683][T18177] team0: Port device team_slave_0 added [ 410.042750][T18177] team0: Port device team_slave_1 added [ 410.079936][T18177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.088800][T18177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.117200][T18177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.129885][T18177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.144202][T18177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.175659][T18177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.285377][T18177] hsr_slave_0: entered promiscuous mode [ 410.299429][T18177] hsr_slave_1: entered promiscuous mode [ 410.313875][T18177] debugfs: 'hsr0' already exists in 'hsr' [ 410.324232][T18177] Cannot create hsr debugfs directory [ 410.457473][T10953] IPVS: stop unused estimator thread 0... [ 410.731690][T18441] netlink: 'syz.3.3160': attribute type 83 has an invalid length. [ 410.771904][ C1] net_ratelimit: 3 callbacks suppressed [ 410.771925][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 410.784071][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 411.120535][T18460] IPVS: set_ctl: invalid protocol: 229 127.0.0.1:20000 [ 411.158675][T18458] IPVS: set_ctl: invalid protocol: 229 127.0.0.1:20000 [ 411.194828][T18177] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 411.233719][T18177] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 411.307327][T18177] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 411.349134][T18177] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 411.374587][T18177] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 411.387422][T18177] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 411.409209][T18177] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 411.418682][T18482] __nla_validate_parse: 4 callbacks suppressed [ 411.418704][T18482] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3166'. [ 411.435835][T18484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3167'. [ 411.452492][T18177] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 411.476168][T18484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3167'. [ 411.506241][T18484] netlink: 'syz.1.3167': attribute type 13 has an invalid length. [ 411.710672][T18177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.733929][ T4938] Bluetooth: hci0: command tx timeout [ 411.740486][T18177] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.770214][T10957] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.777476][T10957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.802890][T10957] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.810063][T10957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.817586][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 411.824054][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 411.948050][T18518] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 412.315565][T18541] netlink: 284 bytes leftover after parsing attributes in process `syz.4.3175'. [ 412.359915][T18538] sctp: [Deprecated]: syz.0.3173 (pid 18538) Use of struct sctp_assoc_value in delayed_ack socket option. [ 412.359915][T18538] Use struct sctp_sack_info instead [ 412.388025][T18544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3174'. [ 412.421255][T18544] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3174'. [ 412.664608][T18177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.738003][T18569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3176'. [ 412.756742][T18568] netlink: 'syz.3.3179': attribute type 1 has an invalid length. [ 412.851394][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 412.857911][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 412.885864][T18177] veth0_vlan: entered promiscuous mode [ 412.918898][T18177] veth1_vlan: entered promiscuous mode [ 412.989913][T18177] veth0_macvtap: entered promiscuous mode [ 413.032736][T18177] veth1_macvtap: entered promiscuous mode [ 413.071865][T18177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.116615][T18177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.176523][T10958] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.217949][T10958] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.244403][T10958] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.282925][T10958] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.535708][T10954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.558278][T18597] gretap0: entered promiscuous mode [ 413.579459][T10954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.614407][T18597] macsec1: entered allmulticast mode [ 413.634863][T18597] gretap0: entered allmulticast mode [ 413.685353][T18597] gretap0: left allmulticast mode [ 413.700795][T18597] gretap0: left promiscuous mode [ 413.774563][T18601] geneve2: entered promiscuous mode [ 413.813412][ T4938] Bluetooth: hci0: command tx timeout [ 413.891594][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 413.898128][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 413.979846][T10954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.013549][T10954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.029779][T18616] pim6reg99999999: entered allmulticast mode [ 414.055666][T18619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3184'. [ 414.130316][T18619] veth0_macvtap: left promiscuous mode [ 414.217257][T18625] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3109'. [ 414.298311][T18629] netlink: 'syz.1.3188': attribute type 1 has an invalid length. [ 414.326918][T18625] netlink: 'syz.2.3109': attribute type 6 has an invalid length. [ 414.349229][T18629] netlink: 'syz.1.3188': attribute type 2 has an invalid length. [ 414.359693][T18625] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3109'. [ 414.496364][T18635] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.562106][T18635] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.794196][T18657] syzkaller0: entered promiscuous mode [ 414.810520][T18657] syzkaller0: entered allmulticast mode [ 414.931617][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 414.978125][ T809] IPVS: starting estimator thread 0... [ 415.102118][T18674] IPVS: using max 45 ests per chain, 108000 per kthread [ 415.315318][T18685] netlink: 'syz.1.3196': attribute type 1 has an invalid length. [ 415.455329][T18685] bond1: entered promiscuous mode [ 415.489506][T18685] 8021q: adding VLAN 0 to HW filter on device bond1 [ 415.615967][T18695] vlan2: entered allmulticast mode [ 415.631619][T18695] bond1: entered allmulticast mode [ 415.706079][T18703] bond1: (slave bridge1): making interface the new active one [ 415.721477][T18703] bridge1: entered promiscuous mode [ 415.730547][T18703] bridge1: entered allmulticast mode [ 415.751858][T18703] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 415.971415][ C1] net_ratelimit: 1 callbacks suppressed [ 415.971437][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 415.983553][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 416.168269][T18739] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 416.407767][T18751] netlink: 'syz.0.3205': attribute type 1 has an invalid length. [ 416.419098][T18749] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.494978][T18751] bond1: entered promiscuous mode [ 416.516686][T18751] 8021q: adding VLAN 0 to HW filter on device bond1 [ 416.554783][T18750] netlink: 'syz.3.3206': attribute type 2 has an invalid length. [ 416.577834][T18750] tipc: Started in network mode [ 416.598930][T18750] tipc: Node identity 1340008, cluster identity 4711 [ 416.624537][T18750] tipc: Node number set to 20185096 [ 416.844990][T18782] xt_hashlimit: size too large, truncated to 1048576 [ 416.923311][T18784] xt_hashlimit: size too large, truncated to 1048576 [ 416.944873][T18784] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 417.001004][T18784] __nla_validate_parse: 2 callbacks suppressed [ 417.001038][T18784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3208'. [ 417.021461][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 417.028002][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 417.321046][T18795] netlink: 'syz.3.3210': attribute type 10 has an invalid length. [ 417.350715][T18761] 8021q: adding VLAN 0 to HW filter on device bond1 [ 417.485167][T18761] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 417.515472][T18761] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 417.528168][T18761] bond1: (slave vti0): making interface the new active one [ 417.536157][T18761] vti0: entered promiscuous mode [ 417.542692][T18761] bond1: (slave vti0): Enslaving as an active interface with an up link [ 417.597278][T18795] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 417.630285][T18795] team0: Port device netdevsim1 added [ 417.664191][T18798] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 418.051384][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 418.066724][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 418.209527][T18837] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3221'. [ 418.657481][T18864] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3225'. [ 418.955880][T18879] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3228'. [ 418.979336][T18877] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 419.086636][T18856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3224'. [ 419.101653][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 419.108128][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 419.334595][T18907] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3235'. [ 419.358100][T18908] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3235'. [ 419.467856][T18915] netlink: 'syz.4.3236': attribute type 10 has an invalid length. [ 419.495575][T18915] geneve1: entered promiscuous mode [ 419.517798][T18915] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 419.990766][T18949] --map-set only usable from mangle table [ 420.131391][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 420.184859][ T29] audit: type=1800 audit(1782114437.186:22): pid=18971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3250" name="blkio.bfq.time_recursive" dev="tmpfs" ino=218 res=0 errno=0 [ 420.225055][ T29] audit: type=1800 audit(1782114437.186:23): pid=18971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3250" name="blkio.bfq.time_recursive" dev="tmpfs" ino=218 res=0 errno=0 [ 420.248035][ T29] audit: type=1800 audit(1782114437.196:24): pid=18971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3250" name="blkio.bfq.time_recursive" dev="tmpfs" ino=218 res=0 errno=0 [ 420.275775][ T29] audit: type=1800 audit(1782114437.196:25): pid=18971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3250" name="blkio.bfq.time_recursive" dev="tmpfs" ino=218 res=0 errno=0 [ 420.309113][ T29] audit: type=1800 audit(1782114437.206:26): pid=18971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3250" name="blkio.bfq.time_recursive" dev="tmpfs" ino=218 res=0 errno=0 [ 420.360641][ T29] audit: type=1800 audit(1782114437.206:27): pid=18971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3250" name="blkio.bfq.time_recursive" dev="tmpfs" ino=218 res=0 errno=0 [ 420.390984][T18981] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3252'. [ 420.416577][ T29] audit: type=1800 audit(1782114437.206:28): pid=18971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3250" name="blkio.bfq.time_recursive" dev="tmpfs" ino=218 res=0 errno=0 [ 420.453420][T18981] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3252'. [ 420.474780][ T29] audit: type=1800 audit(1782114437.206:29): pid=18971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3250" name="blkio.bfq.time_recursive" dev="tmpfs" ino=218 res=0 errno=0 [ 420.535381][ T29] audit: type=1800 audit(1782114437.206:30): pid=18971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3250" name="blkio.bfq.time_recursive" dev="tmpfs" ino=218 res=0 errno=0 [ 420.559284][ T29] audit: type=1800 audit(1782114437.206:31): pid=18971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3250" name="blkio.bfq.time_recursive" dev="tmpfs" ino=218 res=0 errno=0 [ 420.638821][T18997] xt_hashlimit: size too large, truncated to 1048576 [ 420.716407][T19001] bridge_slave_0: left allmulticast mode [ 420.730544][T19001] bridge_slave_0: left promiscuous mode [ 420.744625][T19001] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.794633][T19001] bridge_slave_1: left allmulticast mode [ 420.804627][T19001] bridge_slave_1: left promiscuous mode [ 420.818374][T19001] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.837189][T19001] bond0: (slave bond_slave_0): Releasing backup interface [ 420.888073][T19001] bond0: (slave bond_slave_1): Releasing backup interface [ 420.942545][T19001] team0: Port device team_slave_0 removed [ 420.980613][T19001] team0: Port device team_slave_1 removed [ 421.014749][T19001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.039800][T19001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.063242][T19001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.080479][T19001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.093182][T19001] net_ratelimit: 1 callbacks suppressed [ 421.093211][T19001] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 421.171428][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 421.178327][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 421.220876][T19034] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3262'. [ 421.838037][T19048] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.845765][T19048] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.955479][T19048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.118677][T10964] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.157815][T10964] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.187797][T10964] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.211387][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 422.217887][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 422.229101][T10964] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.244809][T19081] tipc: Started in network mode [ 422.256310][T19081] tipc: Node identity b2276863807b, cluster identity 4711 [ 422.284773][T19081] tipc: Enabled bearer , priority 0 [ 422.320844][T19088] netlink: 'syz.3.3273': attribute type 11 has an invalid length. [ 422.395562][T19096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3274'. [ 422.486691][T19084] syzkaller0: entered promiscuous mode [ 422.508354][T19084] syzkaller0: entered allmulticast mode [ 422.516345][T19084] tipc: Resetting bearer [ 422.576868][T19080] tipc: Resetting bearer [ 422.630710][T19080] tipc: Disabling bearer [ 422.866692][T19127] netlink: 'syz.4.3283': attribute type 1 has an invalid length. [ 422.897845][T19127] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3283'. [ 423.003089][T19143] bond1: option lacp_active: invalid value (8) [ 423.016600][T19143] bond1 (unregistering): Released all slaves [ 423.058641][T19149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3288'. [ 423.068781][T19149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.117718][T19138] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3286'. [ 423.141772][T19138] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3286'. [ 423.251386][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 423.257916][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 423.310723][T19168] netlink: 'syz.0.3294': attribute type 83 has an invalid length. [ 423.343208][T19168] openvswitch: netlink: Key 2 has unexpected len 0 expected 4 [ 423.790448][T19198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3303'. [ 423.851100][T19202] sctp: [Deprecated]: syz.1.3304 (pid 19202) Use of int in max_burst socket option. [ 423.851100][T19202] Use struct sctp_assoc_value instead [ 423.913051][T19202] netlink: zone id is out of range [ 423.942440][T19202] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 423.969297][T19202] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 424.030797][T19209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3307'. [ 424.044116][T19209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3307'. [ 424.262683][T19220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3311'. [ 424.272012][T19220] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3311'. [ 425.071266][T19231] netlink: 'syz.2.3316': attribute type 58 has an invalid length. [ 425.104732][T19246] nbd: nbd64 already in use [ 425.180848][T19254] netlink: 'syz.0.3322': attribute type 10 has an invalid length. [ 425.291336][T18386] udevd[18386]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 425.537326][T19274] netlink: 'syz.1.3326': attribute type 2 has an invalid length. [ 426.063170][T19274] syzkaller0: entered promiscuous mode [ 426.075594][T19274] syzkaller0: entered allmulticast mode [ 426.238090][T19296] syzkaller1: entered promiscuous mode [ 426.255643][T19296] syzkaller1: entered allmulticast mode [ 426.371404][ C1] net_ratelimit: 316 callbacks suppressed [ 426.371427][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 426.383731][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 426.630358][T19311] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20004 [ 426.755223][T19174] Set syz1 is full, maxelem 65536 reached [ 426.775303][T19315] tipc: Enabling of bearer rejected, failed to enable media [ 427.409262][T19332] xt_CT: You must specify a L4 protocol and not use inversions on it [ 427.417907][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 427.417972][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 427.458258][T19336] __nla_validate_parse: 11 callbacks suppressed [ 427.458278][T19336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3346'. [ 427.484280][T19336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3346'. [ 427.674983][T19353] netlink: 'syz.4.3350': attribute type 4 has an invalid length. [ 427.730644][T19357] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3353'. [ 427.976225][T19378] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 428.009342][T19378] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 428.021558][T19378] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 428.042410][T19384] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3355'. [ 428.387212][T19407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3361'. [ 428.439524][T19407] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3361'. [ 428.451473][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 428.457978][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 428.476975][T19408] veth1: entered promiscuous mode [ 428.497379][T19408] macsec1: entered promiscuous mode [ 428.528183][T19408] macsec1: entered allmulticast mode [ 428.556234][T19408] veth1: entered allmulticast mode [ 428.576715][T19408] veth1: left allmulticast mode [ 428.591076][T19408] veth1: left promiscuous mode [ 429.023587][T19437] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3368'. [ 429.065333][T19437] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3368'. [ 429.181466][T19437] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3368'. [ 429.273623][T19455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3372'. [ 429.501513][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 429.508031][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 429.850209][T19498] syzkaller0: entered promiscuous mode [ 429.872730][T19498] syzkaller0: entered allmulticast mode [ 430.167170][T19514] vlan3: entered allmulticast mode [ 430.185874][T19514] bond0: entered allmulticast mode [ 430.191066][T19514] bond_slave_0: entered allmulticast mode [ 430.197133][T19514] bond_slave_1: entered allmulticast mode [ 430.276212][T19524] netlink: 'syz.0.3390': attribute type 1 has an invalid length. [ 430.440904][T19529] bond2: (slave bridge2): making interface the new active one [ 430.459116][T19529] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 430.493534][T19524] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 430.514852][T19529] macvlan2: entered promiscuous mode [ 430.520267][T19529] macvlan2: entered allmulticast mode [ 430.526786][T19529] bond2: entered promiscuous mode [ 430.532145][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 430.556763][T19529] bridge2: entered promiscuous mode [ 430.564415][T19529] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 430.573868][T19529] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 430.590379][T19529] bond2: left promiscuous mode [ 430.595511][T19529] bridge2: left promiscuous mode [ 430.664312][T19530] syzkaller0: entered promiscuous mode [ 430.680227][T19530] syzkaller0: entered allmulticast mode [ 430.792167][ T4938] block nbd1: Receive control failed (result -107) [ 430.998278][T19563] xt_TPROXY: Can be used only with -p tcp or -p udp [ 431.069403][T19566] x_tables: duplicate underflow at hook 3 [ 431.107156][T19567] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 431.153920][T19567] bond1 (unregistering): Released all slaves [ 431.483049][T19585] netlink: 'syz.1.3407': attribute type 1 has an invalid length. [ 431.506418][T19585] netlink: 'syz.1.3407': attribute type 1 has an invalid length. [ 431.527584][T19585] netlink: 'syz.1.3407': attribute type 1 has an invalid length. [ 431.548143][T19585] netlink: 'syz.1.3407': attribute type 1 has an invalid length. [ 431.566715][T19585] netlink: 'syz.1.3407': attribute type 1 has an invalid length. [ 431.581488][T19585] netlink: 'syz.1.3407': attribute type 1 has an invalid length. [ 431.581526][ C1] net_ratelimit: 1 callbacks suppressed [ 431.581604][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 431.601455][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 431.611943][T19585] netlink: 'syz.1.3407': attribute type 1 has an invalid length. [ 431.620008][T19585] netlink: 'syz.1.3407': attribute type 1 has an invalid length. [ 431.632866][T19585] netlink: 'syz.1.3407': attribute type 1 has an invalid length. [ 432.273587][T19617] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 432.388346][T19627] openvswitch: netlink: nsh attr 0 has unexpected len 2 expected 0 [ 432.399083][T19627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.528151][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 432.528169][ T29] audit: type=1800 audit(1782114449.526:50): pid=19636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3426" name="memory.events" dev="tmpfs" ino=569 res=0 errno=0 [ 432.557964][ T29] audit: type=1804 audit(1782114449.526:51): pid=19636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3426" name="/newroot/107/memory.events" dev="tmpfs" ino=569 res=1 errno=0 [ 432.598086][T19639] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 432.611476][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 432.617986][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 432.675712][T19637] __nla_validate_parse: 22 callbacks suppressed [ 432.675736][T19637] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3425'. [ 432.759967][T19645] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.935964][T19649] syzkaller0: entered promiscuous mode [ 432.941741][T19649] syzkaller0: entered allmulticast mode [ 433.252082][T19663] sctp: [Deprecated]: syz.4.3434 (pid 19663) Use of int in maxseg socket option. [ 433.252082][T19663] Use struct sctp_assoc_value instead [ 433.267273][T19663] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3434'. [ 433.349739][T19665] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3435'. [ 433.363929][T19665] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3435'. [ 433.539326][T19680] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3440'. [ 433.651453][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 433.657973][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 433.834801][T19703] tipc: Enabling of bearer rejected, failed to enable media [ 433.869143][T19702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3445'. [ 433.982635][T19718] netlink: 196 bytes leftover after parsing attributes in process `syz.4.3451'. [ 433.993412][T19720] netlink: 196 bytes leftover after parsing attributes in process `syz.4.3451'. [ 434.085329][T19724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3449'. [ 434.125565][T19726] syzkaller0: entered promiscuous mode [ 434.138328][T19726] syzkaller0: entered allmulticast mode [ 434.157178][T19726] tipc: Enabled bearer , priority 0 [ 434.183510][T19725] tipc: Resetting bearer [ 434.200691][T19725] tipc: Disabling bearer [ 434.337060][T19738] nbd: must specify at least one socket [ 434.368001][T19744] batadv_slave_1: entered promiscuous mode [ 434.455982][T10954] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 434.620204][T19759] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3459'. [ 436.771526][ C1] net_ratelimit: 4 callbacks suppressed [ 436.771549][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 436.783694][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 437.313752][T19738] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 437.467266][T19786] validate_nla: 51 callbacks suppressed [ 437.467288][T19786] netlink: 'syz.0.3464': attribute type 1 has an invalid length. [ 437.514744][T19787] bridge_slave_0: left allmulticast mode [ 437.520592][T19787] bridge_slave_0: left promiscuous mode [ 437.527548][T19787] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.543760][T19787] bridge_slave_1: left allmulticast mode [ 437.557066][T19787] bridge_slave_1: left promiscuous mode [ 437.573291][T19787] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.584412][T19793] nbd: must specify a device to reconfigure [ 437.594585][T19787] bond0: (slave bond_slave_0): Releasing backup interface [ 437.602789][T19787] bond_slave_0: left allmulticast mode [ 437.615976][T19787] bond0: (slave bond_slave_1): Releasing backup interface [ 437.625140][T19787] bond_slave_1: left allmulticast mode [ 437.645277][T19787] team0: Port device team_slave_0 removed [ 437.658793][T19787] team0: Port device team_slave_1 removed [ 437.677258][T19787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.685677][T19787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.702754][T19802] netlink: 'syz.0.3464': attribute type 10 has an invalid length. [ 437.713889][T19787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.724408][T19804] netlink: 'syz.1.3468': attribute type 3 has an invalid length. [ 437.736782][T19787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.744768][T19804] __nla_validate_parse: 3 callbacks suppressed [ 437.744785][T19804] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3468'. [ 437.767835][T19806] netlink: 'syz.0.3464': attribute type 10 has an invalid length. [ 437.782453][T19787] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 437.811454][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 437.817997][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 437.848304][T19780] syzkaller0: entered promiscuous mode [ 437.866933][T19780] syzkaller0: entered allmulticast mode [ 437.868891][T19814] IPv6: addrconf: prefix option has invalid lifetime [ 437.954144][T19806] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 437.969088][T19806] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 438.166354][T19821] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 438.193382][T19821] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3471'. [ 438.225362][T19833] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3474'. [ 438.311044][T19834] netlink: 'syz.2.3473': attribute type 1 has an invalid length. [ 438.339505][T19847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3475'. [ 438.346942][T19834] netlink: 'syz.2.3473': attribute type 2 has an invalid length. [ 438.384164][T19847] 8021q: adding VLAN 0 to HW filter on device bond3 [ 438.403019][T19847] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 438.851452][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 438.857971][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 439.901590][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 441.180695][T19826] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 441.289676][T19861] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3481'. [ 441.314621][T19864] netlink: 'syz.2.3478': attribute type 1 has an invalid length. [ 441.356742][T19867] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3480'. [ 441.374838][T19864] 8021q: adding VLAN 0 to HW filter on device bond1 [ 441.405493][T19864] vlan2: entered promiscuous mode [ 441.410721][T19864] bond1: entered promiscuous mode [ 441.417860][T19864] vlan2: entered allmulticast mode [ 441.423740][T19864] bond1: entered allmulticast mode [ 441.466717][T19864] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3478'. [ 441.494276][T19864] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 441.503302][T19864] bond1: (slave batadv1): making interface the new active one [ 441.510872][T19864] batadv1: entered promiscuous mode [ 441.516979][T19864] batadv1: entered allmulticast mode [ 441.523497][T19864] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 441.544973][T19880] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3483'. [ 441.639179][T19885] netlink: 'syz.0.3485': attribute type 362 has an invalid length. [ 441.767369][T19892] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3488'. [ 441.971422][ C1] net_ratelimit: 3 callbacks suppressed [ 441.971442][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 441.983581][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 442.010950][T19920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3494'. [ 442.257547][T19932] syzkaller1: entered promiscuous mode [ 442.265225][T19932] syzkaller1: entered allmulticast mode [ 442.291497][ T4938] Bluetooth: hci5: command 0x0406 tx timeout [ 442.468595][T19948] tipc: Enabled bearer , priority 0 [ 442.481025][T19948] syzkaller0: entered promiscuous mode [ 442.488156][T19948] syzkaller0: entered allmulticast mode [ 442.509846][T19948] tipc: Resetting bearer [ 442.576081][T19947] tipc: Resetting bearer [ 442.644032][T19947] tipc: Disabling bearer [ 442.674480][T19965] netlink: 'syz.3.3509': attribute type 1 has an invalid length. [ 442.915906][T19984] syzkaller0: entered promiscuous mode [ 442.926234][T19984] syzkaller0: entered allmulticast mode [ 443.011465][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 443.017982][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 443.303651][T20007] xt_l2tp: unknown flags: 51 [ 443.519325][T20024] __nla_validate_parse: 4 callbacks suppressed [ 443.519347][T20024] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3522'. [ 443.578177][T20024] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3522'. [ 443.606761][T20023] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3523'. [ 443.659969][T20019] netlink: 'syz.2.3522': attribute type 1 has an invalid length. [ 443.822293][T20041] Bluetooth: MGMT ver 1.23 [ 443.834635][T20034] netlink: 'syz.4.3526': attribute type 11 has an invalid length. [ 443.843124][T20034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3526'. [ 443.941597][T20044] hmac(sha224): entered promiscuous mode [ 443.949154][T20044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3528'. [ 444.051646][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 444.058119][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 444.156660][T20055] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3532'. [ 444.165915][T20055] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3532'. [ 444.175509][T20055] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3532'. [ 444.237296][T20059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3534'. [ 444.343699][T20058] bridge3: port 1(dummy0) entered blocking state [ 444.352109][T20059] netlink: 'syz.1.3534': attribute type 10 has an invalid length. [ 444.363150][T20058] bridge3: port 1(dummy0) entered disabled state [ 444.382109][T20058] dummy0: entered allmulticast mode [ 444.396181][T20059] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3534'. [ 444.410139][T20058] dummy0: entered promiscuous mode [ 444.473817][T20059] bridge3: port 1(dummy0) entered blocking state [ 444.480306][T20059] bridge3: port 1(dummy0) entered forwarding state [ 444.532393][T20059] dummy0: left allmulticast mode [ 444.546881][T20059] bridge3: port 1(dummy0) entered disabled state [ 444.574726][T20059] netlink: 'syz.1.3534': attribute type 10 has an invalid length. [ 444.594432][T20059] netlink: 'syz.1.3534': attribute type 10 has an invalid length. [ 444.619838][T20059] netlink: 'syz.1.3534': attribute type 10 has an invalid length. [ 444.676681][T20059] netlink: 'syz.1.3534': attribute type 10 has an invalid length. [ 444.704235][T20059] netlink: 'syz.1.3534': attribute type 10 has an invalid length. [ 444.726213][T20059] netlink: 'syz.1.3534': attribute type 10 has an invalid length. [ 444.742872][T20059] netlink: 'syz.1.3534': attribute type 10 has an invalid length. [ 445.091374][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 445.097898][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 445.109103][T20111] syz.0.3549: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 445.137344][T20111] CPU: 1 UID: 0 PID: 20111 Comm: syz.0.3549 Not tainted syzkaller #0 PREEMPT(full) [ 445.137375][T20111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 445.137396][T20111] Call Trace: [ 445.137408][T20111] [ 445.137417][T20111] dump_stack_lvl+0xe8/0x150 [ 445.137446][T20111] warn_alloc+0x249/0x340 [ 445.137473][T20111] ? __pfx_stack_trace_save+0x10/0x10 [ 445.137504][T20111] ? __pfx_warn_alloc+0x10/0x10 [ 445.137529][T20111] ? __resched_curr+0x23e/0x530 [ 445.137561][T20111] ? __kasan_kmalloc+0x93/0xb0 [ 445.137588][T20111] ? __kmalloc_cache_noprof+0x318/0x660 [ 445.137614][T20111] ? xskq_create+0x56/0x170 [ 445.137637][T20111] ? xsk_init_queue+0x8a/0xe0 [ 445.137658][T20111] ? xsk_setsockopt+0x52a/0x960 [ 445.137678][T20111] ? do_sock_setsockopt+0x17c/0x1b0 [ 445.137706][T20111] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 445.137732][T20111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.137756][T20111] __vmalloc_node_range_noprof+0x12c/0x1730 [ 445.137797][T20111] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 445.137827][T20111] ? __kasan_kmalloc+0x93/0xb0 [ 445.137857][T20111] vmalloc_user_noprof+0xad/0xe0 [ 445.137882][T20111] ? xskq_create+0xbf/0x170 [ 445.137906][T20111] xskq_create+0xbf/0x170 [ 445.137931][T20111] xsk_init_queue+0x8a/0xe0 [ 445.137953][T20111] xsk_setsockopt+0x52a/0x960 [ 445.137975][T20111] ? __pfx_xsk_setsockopt+0x10/0x10 [ 445.137996][T20111] ? __pfx_aa_sk_perm+0x10/0x10 [ 445.138025][T20111] ? lock_release+0x4b/0x3c0 [ 445.138053][T20111] ? aa_sock_opt_perm+0xff/0x1a0 [ 445.138072][T20111] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 445.138096][T20111] ? __pfx_xsk_setsockopt+0x10/0x10 [ 445.138127][T20111] do_sock_setsockopt+0x17c/0x1b0 [ 445.138157][T20111] __x64_sys_setsockopt+0x13d/0x1b0 [ 445.138186][T20111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.138207][T20111] do_syscall_64+0x174/0x580 [ 445.138232][T20111] ? trace_irq_disable+0x3b/0x140 [ 445.138259][T20111] ? clear_bhb_loop+0x40/0x90 [ 445.138280][T20111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.138299][T20111] RIP: 0033:0x7f2e6e59ce59 [ 445.138317][T20111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.138333][T20111] RSP: 002b:00007f2e6f3be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 445.138355][T20111] RAX: ffffffffffffffda RBX: 00007f2e6e815fa0 RCX: 00007f2e6e59ce59 [ 445.138369][T20111] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 445.138380][T20111] RBP: 00007f2e6e632e6f R08: 0000000000000004 R09: 0000000000000000 [ 445.138391][T20111] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.138403][T20111] R13: 00007f2e6e816038 R14: 00007f2e6e815fa0 R15: 00007ffd8083c838 [ 445.138434][T20111] [ 445.138449][T20111] Mem-Info: [ 445.480832][T20114] kthread_run failed with err -4 [ 445.496611][T20111] active_anon:13102 inactive_anon:0 isolated_anon:0 [ 445.496611][T20111] active_file:2760 inactive_file:40434 isolated_file:0 [ 445.496611][T20111] unevictable:768 dirty:82 writeback:0 [ 445.496611][T20111] slab_reclaimable:12199 slab_unreclaimable:165895 [ 445.496611][T20111] mapped:29377 shmem:1428 pagetables:1445 [ 445.496611][T20111] sec_pagetables:0 bounce:0 [ 445.496611][T20111] kernel_misc_reclaimable:0 [ 445.496611][T20111] free:1226838 free_pcp:25553 free_cma:0 [ 445.587606][T20111] Node 0 active_anon:52108kB inactive_anon:0kB active_file:11040kB inactive_file:161544kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117408kB dirty:328kB writeback:0kB shmem:4176kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17248kB pagetables:5624kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 445.626513][T20111] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 445.668575][T20125] vti0: entered promiscuous mode [ 445.684179][T20125] vti0: entered allmulticast mode [ 445.723238][T20111] Node 0 DMA free:11256kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 445.779089][T20111] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 445.786886][T20111] Node 0 DMA32 free:1139580kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52308kB inactive_anon:0kB active_file:11040kB inactive_file:161544kB unevictable:1536kB writepending:328kB zspages:0kB present:3129332kB managed:2552592kB mlocked:0kB bounce:0kB free_pcp:36148kB local_pcp:15140kB free_cma:0kB [ 445.821234][T20111] lowmem_reserve[]: 0 0 0 0 0 [ 445.849510][T20111] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:664kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 445.882440][T20111] lowmem_reserve[]: 0 0 0 0 0 [ 445.898341][T20111] Node 1 Normal free:3755492kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:66352kB local_pcp:32248kB free_cma:0kB [ 445.932000][T20111] lowmem_reserve[]: 0 0 0 0 0 [ 445.936861][T20111] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11256kB [ 445.981512][T20111] Node 0 DMA32: 6337*4kB (UME) 4573*8kB (UM) 2535*16kB (UME) 619*32kB (UME) 814*64kB (UM) 664*128kB (UME) 620*256kB (UME) 387*512kB (UME) 267*1024kB (UME) 122*2048kB (UM) 0*4096kB = 1139516kB [ 446.045622][T20111] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 446.064680][T20111] Node 1 Normal: 3*4kB (UM) 4*8kB (UM) 11*16kB (UM) 2*32kB (UM) [ 446.065568][T20151] bridge_slave_0 (unregistering): left allmulticast mode [ 446.107313][T20111] 9*64kB (UM) 7*128kB (UM) 7*256kB (UM) 7*512kB (UM) 5*1024kB (UM) 4*2048kB (U) 912*4096kB (UM) = 3755996kB [ 446.127111][T20151] bridge_slave_0 (unregistering): left promiscuous mode [ 446.141374][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 446.143142][T20111] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 446.148013][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 446.169332][T20151] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.202889][T20111] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 446.222692][T20111] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 446.243565][T20111] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 446.265028][T20111] 44619 total pagecache pages [ 446.279321][T20111] 0 pages in swap cache [ 446.289152][T20111] Free swap = 124996kB [ 446.296312][T20111] Total swap = 124996kB [ 446.301064][T20154] veth3: entered promiscuous mode [ 446.307459][T20111] 2097051 pages RAM [ 446.312488][T20111] 0 pages HighMem/MovableOnly [ 446.319579][T20111] 427122 pages reserved [ 446.329584][T20111] 0 pages cma reserved [ 446.342783][T20161] syzkaller0: entered promiscuous mode [ 446.354957][T20161] syzkaller0: entered allmulticast mode [ 446.376207][T20164] bond2: entered allmulticast mode [ 446.780420][T20193] sctp: [Deprecated]: syz.3.3575 (pid 20193) Use of int in max_burst socket option. [ 446.780420][T20193] Use struct sctp_assoc_value instead [ 447.171371][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 447.177914][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 447.288923][T20224] tipc: New replicast peer: 255.255.255.255 [ 447.307360][T20224] tipc: Enabled bearer , priority 10 [ 447.347098][T20230] sctp: [Deprecated]: syz.2.3587 (pid 20230) Use of int in max_burst socket option. [ 447.347098][T20230] Use struct sctp_assoc_value instead [ 447.427791][T20232] tipc: Enabling of bearer rejected, failed to enable media [ 447.712807][T20254] syzkaller0: entered promiscuous mode [ 447.741958][T20254] syzkaller0: entered allmulticast mode [ 447.776427][T20257] batadv1: entered promiscuous mode [ 447.791567][T20257] batadv1: entered allmulticast mode [ 447.806560][T20257] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 448.016161][T20271] syzkaller0: entered promiscuous mode [ 448.034342][T20271] syzkaller0: entered allmulticast mode [ 448.174028][T20275] IPVS: ip_vs_edit_dest(): server weight less than zero [ 448.211415][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 448.217894][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 448.548831][T20285] syzkaller0: entered allmulticast mode [ 448.715341][T20300] validate_nla: 30 callbacks suppressed [ 448.715361][T20300] netlink: 'syz.0.3611': attribute type 3 has an invalid length. [ 448.789194][T20303] __nla_validate_parse: 47 callbacks suppressed [ 448.789218][T20303] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3612'. [ 448.839943][T20303] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 448.861400][T20294] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3609'. [ 448.871574][T20285] syzkaller0: mtu less than device minimum [ 449.251404][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 449.257934][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 449.384263][T20343] +: renamed from syzkaller0 [ 449.894830][T20369] xt_limit: Overflow, try lower: 268435456/134217728 [ 450.194180][T20380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3627'. [ 450.252193][T20373] sctp: [Deprecated]: syz.0.3627 (pid 20373) Use of struct sctp_assoc_value in delayed_ack socket option. [ 450.252193][T20373] Use struct sctp_sack_info instead [ 450.301399][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 450.307942][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 450.363428][T20388] netlink: 'syz.1.3630': attribute type 1 has an invalid length. [ 450.375332][T20388] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3630'. [ 450.394305][T20388] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3630'. [ 450.409616][T20388] netlink: 'syz.1.3630': attribute type 1 has an invalid length. [ 450.422841][T20388] netlink: 'syz.1.3630': attribute type 8 has an invalid length. [ 450.444310][T20388] netlink: 606 bytes leftover after parsing attributes in process `syz.1.3630'. [ 450.486696][T20387] syzkaller0: entered promiscuous mode [ 450.523423][T20387] syzkaller0: entered allmulticast mode [ 450.569339][T20387] tipc: Started in network mode [ 450.584179][T20387] tipc: Node identity de711367bf1f, cluster identity 4711 [ 450.605391][T20387] tipc: Enabled bearer , priority 0 [ 450.618897][T20398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3634'. [ 450.719826][T20386] tipc: Resetting bearer [ 450.731182][T20386] tipc: Disabling bearer [ 450.772190][ T5634] Bluetooth: hci0: command 0x0405 tx timeout [ 450.819437][T20398] 8021q: adding VLAN 0 to HW filter on device bond4 [ 450.844156][T20407] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3636'. [ 450.952251][T20420] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3640'. [ 450.964938][T20408] bond4: (slave veth3): Enslaving as an active interface with an up link [ 450.978337][T20415] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3634'. [ 451.185637][T20440] netlink: 'syz.2.3646': attribute type 1 has an invalid length. [ 451.196040][T20436] netlink: 'syz.4.3644': attribute type 12 has an invalid length. [ 451.208510][T20438] syzkaller0: entered promiscuous mode [ 451.219719][T20438] syzkaller0: entered allmulticast mode [ 451.395904][T20455] vlan0: entered promiscuous mode [ 451.485448][T20461] bridge_slave_0: left allmulticast mode [ 451.498140][T20461] bridge_slave_0: left promiscuous mode [ 451.530897][T20461] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.575483][T20461] bridge_slave_1: left allmulticast mode [ 451.593551][T20461] bridge_slave_1: left promiscuous mode [ 451.605207][T20461] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.647675][T20461] bond0: (slave bond_slave_0): Releasing backup interface [ 451.690983][T20461] bond0: (slave bond_slave_1): Releasing backup interface [ 451.712827][T20481] netlink: 'syz.2.3656': attribute type 1 has an invalid length. [ 451.775355][T20461] team0: Port device team_slave_0 removed [ 451.806485][T20461] team0: Port device team_slave_1 removed [ 451.826934][T20461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.851769][T20461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.886461][T20461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.905862][T20461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.936666][T20465] netlink: 'syz.4.3652': attribute type 9 has an invalid length. [ 452.135394][T20500] syzkaller0: entered promiscuous mode [ 452.145324][T20500] syzkaller0: entered allmulticast mode [ 452.326996][T20518] pim6reg1: entered promiscuous mode [ 452.343222][T20518] pim6reg1: entered allmulticast mode [ 452.371484][ C1] net_ratelimit: 5 callbacks suppressed [ 452.371503][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 452.383674][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 452.418674][T20521] mac80211_hwsim hwsim50 syzkaller0: entered promiscuous mode [ 452.435489][T20521] mac80211_hwsim hwsim50 syzkaller0: entered allmulticast mode [ 452.531505][ T5634] Bluetooth: hci1: command 0x0401 tx timeout [ 452.725880][T20541] netlink: 'syz.1.3673': attribute type 1 has an invalid length. [ 452.825385][T20541] 8021q: adding VLAN 0 to HW filter on device bond2 [ 452.841961][ T4938] block nbd3: Receive control failed (result -1) [ 452.864958][T20541] bond2: (slave geneve2): making interface the new active one [ 452.878259][T20541] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 452.925297][T20556] syzkaller0: entered promiscuous mode [ 452.958085][T20556] syzkaller0: entered allmulticast mode [ 453.202301][T20580] syzkaller0: entered promiscuous mode [ 453.219844][T20580] syzkaller0: entered allmulticast mode [ 453.268509][T20580] tipc: Enabled bearer , priority 0 [ 453.411367][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 453.417895][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 453.596336][T20601] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 453.796390][T20608] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 453.882343][T20606] __nla_validate_parse: 15 callbacks suppressed [ 453.882366][T20606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3688'. [ 453.994678][T20575] tipc: Resetting bearer [ 454.028245][T20575] tipc: Disabling bearer [ 454.050763][T20616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3691'. [ 454.159547][T20613] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.370965][T20613] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.444676][T20613] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.461377][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 454.467842][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 454.533893][T20647] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.575455][T20613] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.629692][T20652] xt_connbytes: Forcing CT accounting to be enabled [ 454.636957][T20652] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 454.693973][T10958] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.718736][T10958] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.737745][T10958] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.753639][T10958] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.763561][T20667] pim6reg1: entered promiscuous mode [ 454.769001][T20667] pim6reg1: entered allmulticast mode [ 454.926139][T20681] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 455.158563][T20684] netlink: 'syz.2.3705': attribute type 1 has an invalid length. [ 455.177719][T20684] bond2: entered promiscuous mode [ 455.183367][T20684] 8021q: adding VLAN 0 to HW filter on device bond2 [ 455.202763][T20684] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 455.215369][T20684] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 455.225869][T20684] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 455.293070][T20687] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 455.491497][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 457.354757][T20647] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 457.468450][T20700] netlink: 'syz.3.3709': attribute type 3 has an invalid length. [ 457.505152][T20701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.571367][ C1] net_ratelimit: 3 callbacks suppressed [ 457.571386][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 457.583543][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 458.142385][T20735] syz_tun: entered allmulticast mode [ 458.160987][T20735] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3723'. [ 458.205499][T20735] dvmrp8: entered allmulticast mode [ 458.233893][T20734] syz_tun: left allmulticast mode [ 458.260370][T20743] netlink: 'syz.3.3724': attribute type 1 has an invalid length. [ 458.269242][T20742] netlink: 'syz.3.3724': attribute type 1 has an invalid length. [ 458.300414][T20742] 8021q: adding VLAN 0 to HW filter on device bond3 [ 458.308841][T20742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3724'. [ 458.325792][T20742] bond3: (slave geneve3): making interface the new active one [ 458.334655][T20742] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 458.611444][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 458.618034][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 459.651428][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 459.657965][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 460.702489][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 460.708931][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 461.731440][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 461.737891][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 462.771430][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 462.772350][ T5634] Bluetooth: hci3: command 0x0406 tx timeout [ 462.777888][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 463.811417][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 463.817881][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 464.851453][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 464.858003][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 465.901463][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 465.907908][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 466.931437][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 466.937903][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 467.891432][ T5634] Bluetooth: hci2: command 0x0406 tx timeout [ 467.971421][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 467.977900][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 469.011776][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 469.018243][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 470.051436][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 470.057907][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 471.091440][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 471.097984][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 472.131414][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 472.137887][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 473.171427][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 473.177914][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 474.211418][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 474.217886][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 475.251405][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 475.257908][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 476.291441][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 476.298067][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 477.341658][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 477.348199][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 478.371434][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 478.377880][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 479.411445][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 479.417992][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 480.451484][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 480.458020][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 481.491427][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 481.497897][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 482.541494][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 482.547941][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 483.571542][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 483.578010][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 484.611434][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 484.618698][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 485.651475][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 485.657940][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 486.691489][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 486.697956][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 487.731509][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 487.738035][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 488.771505][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 488.778012][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 489.811548][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 489.818149][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 490.851546][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 490.857994][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 491.891468][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 491.897925][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 492.931487][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 492.937939][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 493.971574][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 493.978017][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 495.011494][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 495.018052][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 496.051575][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 496.058030][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 497.101422][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 497.107973][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 498.131440][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 498.137910][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 499.171426][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 499.177887][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 500.211431][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 500.218400][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 501.251452][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 501.257938][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 502.291592][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 502.298090][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 503.331422][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 503.337868][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 504.371458][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 504.378002][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 505.411415][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 505.417954][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 506.451433][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 506.457910][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 507.491463][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 507.497922][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 508.211759][T20753] syzkaller0: entered promiscuous mode [ 508.217352][T20753] syzkaller0: entered allmulticast mode [ 508.319979][T20757] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 508.430000][T20767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3731'. [ 508.525759][T20769] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3732'. [ 508.534970][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 508.535050][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 508.614858][T20755] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3726'. [ 508.752408][T20789] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3738'. [ 508.865334][T20781] smc: removing ib device syz0 [ 508.897473][T20781] smbdirect: ib_dev[syz0] removed [ 508.906548][T20801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3741'. [ 508.922774][T20794] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3739'. [ 509.180224][T20816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3745'. [ 509.206989][T20818] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3746'. [ 509.264468][T20818] ip6gre1: entered promiscuous mode [ 509.275024][T20818] ip6gre1: entered allmulticast mode [ 509.297184][T20816] netlink: 'syz.4.3745': attribute type 6 has an invalid length. [ 509.413421][T20827] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3748'. [ 509.503266][T20830] netlink: 'syz.2.3748': attribute type 10 has an invalid length. [ 509.536332][T20832] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3750'. [ 509.552816][T20835] netlink: 'syz.2.3748': attribute type 10 has an invalid length. [ 509.571351][ C1] net_ratelimit: 3 callbacks suppressed [ 509.571370][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 509.583502][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 509.640603][T20830] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 509.660177][T20830] team0: Failed to send options change via netlink (err -105) [ 509.697687][T20830] team0: Port device dummy0 added [ 509.710562][T20835] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 509.742288][T20835] team0: Failed to send options change via netlink (err -105) [ 509.755209][T20835] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 509.779412][T20835] team0: Port device dummy0 removed [ 509.817316][T20835] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 509.978164][T20853] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 510.093938][T20850] syzkaller0: entered promiscuous mode [ 510.104781][T20850] syzkaller0: entered allmulticast mode [ 510.333200][T20863] tipc: Enabled bearer , priority 0 [ 510.349775][T20863] netlink: 'syz.1.3757': attribute type 32 has an invalid length. [ 510.434418][ T4938] Bluetooth: hci0: link tx timeout [ 510.439629][ T4938] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 510.448977][ T4938] Bluetooth: hci0: link tx timeout [ 510.457621][ T4938] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 510.611556][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 510.618102][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 510.702106][T20879] netlink: 'syz.4.3760': attribute type 13 has an invalid length. [ 510.736534][T20879] netlink: 'syz.4.3760': attribute type 17 has an invalid length. [ 511.075272][T20879] veth1_macvtap: entered promiscuous mode [ 511.081094][T20879] veth1_macvtap: entered allmulticast mode [ 511.087871][T20879] macsec0: left promiscuous mode [ 511.095223][T20879] macsec0: left allmulticast mode [ 511.102333][T20879] veth1_macvtap: left allmulticast mode [ 511.113459][T20879] geneve1: left promiscuous mode [ 511.166398][T20879] 8021q: adding VLAN 0 to HW filter on device bond1 [ 511.176609][T20879] ip6gre1: left promiscuous mode [ 511.183064][T20879] ip6gre1: left allmulticast mode [ 511.192765][T20879] 8021q: adding VLAN 0 to HW filter on device bond3 [ 511.218051][T20879] 8021q: adding VLAN 0 to HW filter on device bond5 [ 511.230848][T20879] 8021q: adding VLAN 0 to HW filter on device bond6 [ 511.242321][T20879] vti0: left promiscuous mode [ 511.247429][T20879] vti0: left allmulticast mode [ 511.290134][T20892] tipc: Resetting bearer [ 511.320869][T20897] netlink: 'syz.1.3764': attribute type 12 has an invalid length. [ 511.333893][T10953] bond4: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 511.350080][T10953] bond4: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 511.359340][T10953] bond4: (slave veth3): making interface the new active one [ 511.372672][T10953] bond4: active interface up! [ 511.380325][T10964] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 511.397620][T10964] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 511.428787][T10964] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 511.444279][T10964] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 511.651390][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 511.658007][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 511.815174][T20930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 511.958493][T10954] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.994971][T10954] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.031717][T10954] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.056492][T10954] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.125139][T20956] nftables ruleset with unbound chain [ 512.273651][T20967] netlink: 'syz.4.3787': attribute type 4 has an invalid length. [ 512.302415][T20965] netlink: 'syz.4.3787': attribute type 4 has an invalid length. [ 512.318354][T20966] tipc: Enabled bearer , priority 0 [ 512.325925][T20971] netlink: 'syz.4.3787': attribute type 4 has an invalid length. [ 512.347741][T20964] tipc: Disabling bearer [ 512.531923][ T49] Bluetooth: hci0: command 0x0405 tx timeout [ 512.691374][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 512.697880][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 513.076517][T21018] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.458468][T21036] tipc: Enabled bearer , priority 0 [ 513.476095][T21039] syzkaller0: entered promiscuous mode [ 513.494602][T21039] syzkaller0: entered allmulticast mode [ 513.572527][T21036] tipc: Resetting bearer [ 513.597266][T21036] tipc: Disabling bearer [ 513.761776][T21054] __nla_validate_parse: 15 callbacks suppressed [ 513.761799][T21054] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3817'. [ 514.009119][T21065] syzkaller0: entered promiscuous mode [ 514.019694][T21065] syzkaller0: entered allmulticast mode [ 514.045342][T21067] netlink: 284 bytes leftover after parsing attributes in process `syz.3.3822'. [ 514.305873][T21088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3827'. [ 514.526166][T21096] validate_nla: 2 callbacks suppressed [ 514.526186][T21096] netlink: 'syz.4.3830': attribute type 1 has an invalid length. [ 514.587881][T21096] bond7: (slave veth7): Enslaving as an active interface with a down link [ 514.604519][T21097] bond7: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 514.613306][ T5634] Bluetooth: hci0: command 0x0405 tx timeout [ 514.646678][T21100] bond7: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 514.771337][ C1] net_ratelimit: 3 callbacks suppressed [ 514.771372][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 514.783502][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 515.064868][T21125] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3837'. [ 515.351183][T21142] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3843'. [ 515.370202][T21145] netlink: 1728 bytes leftover after parsing attributes in process `syz.3.3844'. [ 515.581707][T21157] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3847'. [ 515.628370][T21163] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 515.811334][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 515.817830][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 515.958971][T21180] netlink: 2780 bytes leftover after parsing attributes in process `syz.1.3853'. [ 516.078422][T21189] veth1_to_bond: entered allmulticast mode [ 516.091196][T21189] veth1_to_bond: entered promiscuous mode [ 516.102920][T21188] veth1_to_bond: left promiscuous mode [ 516.117845][T21188] veth1_to_bond: left allmulticast mode [ 516.398982][T21210] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3862'. [ 516.478141][T21219] bond3: option packets_per_slave: invalid value (729666450) [ 516.496142][T21219] bond3: option packets_per_slave: allowed values 0 - 65535 [ 516.517212][T21219] bond3 (unregistering): Released all slaves [ 516.535330][T21211] netlink: 'syz.3.3863': attribute type 1 has an invalid length. [ 516.606183][T21230] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3866'. [ 516.818201][T21253] netlink: 'syz.3.3873': attribute type 14 has an invalid length. [ 516.826918][T21253] netlink: 'syz.3.3873': attribute type 12 has an invalid length. [ 516.844632][T21253] IPVS: set_ctl: invalid protocol: 137 172.20.20.16:20000 [ 516.851952][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 516.852016][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 517.076012][T21270] netlink: 'syz.3.3877': attribute type 10 has an invalid length. [ 517.257180][T21287] sctp: [Deprecated]: syz.2.3881 (pid 21287) Use of struct sctp_assoc_value in delayed_ack socket option. [ 517.257180][T21287] Use struct sctp_sack_info instead [ 517.891364][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 517.897892][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 518.941478][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 518.948022][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 519.091688][T10950] wlan0: Trigger new scan to find an IBSS to join [ 519.742763][T21244] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 519.935417][T21311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 519.971348][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 519.977856][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 520.121408][T21331] __nla_validate_parse: 5 callbacks suppressed [ 520.121429][T21331] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3892'. [ 520.219092][T21332] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.240173][T21339] xt_hashlimit: size too large, truncated to 1048576 [ 520.301427][T21342] xt_CONNSECMARK: invalid mode: 254 [ 520.318009][T21342] netlink: 'syz.4.3893': attribute type 1 has an invalid length. [ 520.339365][T21342] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3893'. [ 520.391482][T21344] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3893'. [ 521.011406][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 521.017971][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 521.062830][T21375] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3896'. [ 521.115839][T21332] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.206472][T21332] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.353617][T21332] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.479455][T10953] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.523082][T10953] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.552061][T10953] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.572869][T10953] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.887803][T21434] tipc: Enabling of bearer rejected, failed to enable media [ 521.898836][T21436] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 521.933432][T21439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3906'. [ 521.974348][T21439] xfrm0: entered allmulticast mode [ 522.055741][T10964] wlan0: Trigger new scan to find an IBSS to join [ 522.061599][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 522.068844][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 522.168451][T21462] netlink: 'syz.2.3909': attribute type 13 has an invalid length. [ 522.185795][T21462] netlink: 'syz.2.3909': attribute type 17 has an invalid length. [ 522.275135][T21462] gretap0: refused to change device tx_queue_len [ 522.290130][T21462] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 522.308787][T21471] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3916'. [ 522.333227][T10957] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.360775][T10957] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.396570][T10957] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.426702][T10957] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.676909][T21490] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.684480][T21490] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.780373][T21490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.796837][T21490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 522.857060][T21497] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3924'. [ 522.872919][T10953] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.900290][T10953] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.920994][T10953] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.930258][T10953] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.101405][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 523.107906][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 523.419634][T21521] netlink: 'syz.3.3930': attribute type 1 has an invalid length. [ 523.440931][T21521] 8021q: adding VLAN 0 to HW filter on device bond4 [ 523.460881][T21521] bond4: (slave veth7): Enslaving as an active interface with a down link [ 523.474716][T21521] bond4: (slave dummy0): making interface the new active one [ 523.483537][T21521] dummy0: entered promiscuous mode [ 523.489409][T21521] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 523.500009][T21521] netlink: 'syz.3.3930': attribute type 10 has an invalid length. [ 523.508068][T21521] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3930'. [ 523.518513][T21521] bond4: (slave dummy0): Releasing active interface [ 523.948368][T21530] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3932'. [ 524.457806][T21539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3936'. [ 524.576434][T21550] netlink: 'syz.3.3939': attribute type 1 has an invalid length. [ 524.584835][T21550] netlink: 'syz.3.3939': attribute type 2 has an invalid length. [ 524.776888][T21562] syzkaller0: entered promiscuous mode [ 524.782591][T21562] syzkaller0: entered allmulticast mode [ 525.181383][ C1] net_ratelimit: 2 callbacks suppressed [ 525.181405][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 525.193904][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 525.967115][T21502] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 526.221345][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 526.227845][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 526.283030][T21591] bond5: option downdelay: invalid value (18446744073709551487) [ 526.312203][T21607] sctp: [Deprecated]: syz.2.3951 (pid 21607) Use of int in max_burst socket option. [ 526.312203][T21607] Use struct sctp_assoc_value instead [ 526.344774][T21591] bond5: option downdelay: allowed values 0 - 2147483647 [ 526.353328][T21591] bond5 (unregistering): Released all slaves [ 526.373568][T21607] x_tables: duplicate underflow at hook 1 [ 526.405227][T21595] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 526.469697][T21607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.488018][T21607] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.509596][T21607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.587283][T21607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.608813][T21607] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 526.630463][T10954] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.637686][T10954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.908387][T21636] netlink: 'syz.3.3962': attribute type 1 has an invalid length. [ 526.920020][T21636] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 527.002483][T21641] netlink: 'syz.0.3963': attribute type 1 has an invalid length. [ 527.028640][T21641] __nla_validate_parse: 2 callbacks suppressed [ 527.028660][T21641] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3963'. [ 527.050403][T21648] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3963'. [ 527.081595][T21642] tipc: Failed to remove unknown binding: 66,0,0/0:3041709324/3041709326 [ 527.116472][T21648] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 527.130086][T21642] tipc: Failed to remove unknown binding: 66,0,0/0:3041709324/3041709325 [ 527.147633][T21648] 0ªî{X¹¦: entered allmulticast mode [ 527.175141][T21648] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 527.251488][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 527.258007][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 527.281082][T21655] SET target dimension over the limit! [ 527.329305][T21664] netlink: 'syz.0.3969': attribute type 11 has an invalid length. [ 527.356197][T21666] tipc: Failed to remove unknown binding: 66,0,0/0:3041709324/3041709326 [ 527.381836][T21666] tipc: Failed to remove unknown binding: 66,0,0/0:3041709324/3041709325 [ 527.410689][T21668] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3971'. [ 527.488040][T21672] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3970'. [ 527.528784][T21675] netlink: 'syz.0.3972': attribute type 1 has an invalid length. [ 527.566238][T21675] bond5: entered allmulticast mode [ 527.617300][T10954] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.656651][T10954] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.668548][T10954] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.694643][T10954] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.711142][T21685] netlink: 2712 bytes leftover after parsing attributes in process `syz.4.3975'. [ 527.824784][T21691] openvswitch: netlink: IP tunnel dst address not specified [ 527.983416][T21707] netlink: 'syz.2.3983': attribute type 12 has an invalid length. [ 528.064468][T21704] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 528.124321][T21698] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 528.291344][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 528.319793][T21735] netlink: 'syz.3.3988': attribute type 14 has an invalid length. [ 528.903857][T21747] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 529.003429][T21751] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3994'. [ 529.048286][T21751] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3994'. [ 529.057544][T21751] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3994'. [ 529.070458][T21751] geneve2: entered promiscuous mode [ 529.359306][T21769] bond6: option ad_user_port_key: invalid value (65535) [ 529.366787][T21769] bond6: option ad_user_port_key: allowed values 0 - 1023 [ 529.375604][T21769] bond6 (unregistering): Released all slaves [ 529.395105][T21773] IPVS: set_ctl: invalid protocol: 47 172.20.20.64:20000 [ 529.492005][ T5757] IPVS: starting estimator thread 0... [ 529.498326][T21786] xt_hashlimit: size too large, truncated to 1048576 [ 529.552093][T21794] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4003'. [ 529.601385][T21787] IPVS: using max 45 ests per chain, 108000 per kthread [ 529.647524][T21796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4004'. [ 529.944541][T21808] netlink: 'syz.1.4007': attribute type 29 has an invalid length. [ 530.395713][ C1] net_ratelimit: 3 callbacks suppressed [ 530.395734][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 530.407818][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 530.451771][T21850] netlink: 'syz.2.4021': attribute type 1 has an invalid length. [ 530.546749][T21854] syzkaller1: entered promiscuous mode [ 530.552975][T21854] syzkaller1: entered allmulticast mode [ 530.618298][T21856] syzkaller1: left promiscuous mode [ 530.628620][T21856] syzkaller1: left allmulticast mode [ 531.314866][T21899] netlink: 'syz.1.4037': attribute type 1 has an invalid length. [ 531.421337][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 531.427867][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 531.799734][T21935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 531.856735][T21939] netlink: 'syz.3.4050': attribute type 1 has an invalid length. [ 531.912490][T21935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 531.914493][T21941] netlink: 'syz.1.4052': attribute type 7 has an invalid length. [ 531.954108][T21935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 532.008843][T21952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 532.017745][T21941] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 532.051038][T21941] syzkaller1: Refused to change device type [ 532.060038][T21935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 532.101416][T21935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 532.136600][T21935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 532.169535][T21935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 532.199144][T21957] __nla_validate_parse: 13 callbacks suppressed [ 532.199169][T21957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4054'. [ 532.212869][T21935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 532.267968][T21935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 532.312065][T21935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 532.327604][T21957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4054'. [ 532.333074][T21960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4055'. [ 532.350173][T21935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 532.375777][T21935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 532.422750][T21935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 532.441735][T10954] bridge_slave_1: left promiscuous mode [ 532.451340][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 532.457913][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 532.474504][T10954] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.502762][T10954] bridge_slave_0: left allmulticast mode [ 532.518474][T10954] bridge_slave_0: left promiscuous mode [ 532.544694][T10954] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.616734][T21968] netlink: 'syz.3.4058': attribute type 1 has an invalid length. [ 532.631779][T21968] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4058'. [ 533.036289][T10954] bond4 (unregistering): (slave bridge6): Releasing active interface [ 533.080720][T10954] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 533.091071][T21989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.102050][T10954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 533.112302][T10954] bond0 (unregistering): Released all slaves [ 533.124928][T10954] bond1 (unregistering): (slave bond2): Releasing backup interface [ 533.138323][T10954] bond1 (unregistering): Released all slaves [ 533.180707][T10954] bond2 (unregistering): Released all slaves [ 533.210887][T10954] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface [ 533.233128][T10954] bond3 (unregistering): Released all slaves [ 533.249291][T10954] bond4 (unregistering): Released all slaves [ 533.263338][T10954] bond5 (unregistering): Released all slaves [ 533.277266][T10954] bond6 (unregistering): Released all slaves [ 533.300334][T10954] bond7 (unregistering): Released all slaves [ 533.491341][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 533.497893][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 533.547648][T22006] sctp: [Deprecated]: syz.1.4065 (pid 22006) Use of int in max_burst socket option. [ 533.547648][T22006] Use struct sctp_assoc_value instead [ 533.578746][T10954] tipc: Left network mode [ 533.605734][T22010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4066'. [ 533.618851][T22006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4065'. [ 533.662283][T22006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4065'. [ 533.673475][T10958] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.683313][T10958] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.695583][T10958] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.712377][T10958] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.787444][T22020] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.138911][T10954] hsr_slave_0: left promiscuous mode [ 534.145389][T10954] hsr_slave_1: left promiscuous mode [ 534.152878][T10954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.167193][T10954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.567677][T10954] IPVS: stop unused estimator thread 0... [ 535.571575][ C1] net_ratelimit: 2 callbacks suppressed [ 535.571597][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 535.583823][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 536.064905][T21989] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 536.256676][T22052] syzkaller0: entered promiscuous mode [ 536.288516][T22052] syzkaller0: entered allmulticast mode [ 536.301726][T22059] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4081'. [ 536.423692][T22068] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4083'. [ 536.441385][T22066] netlink: 'syz.1.4083': attribute type 8 has an invalid length. [ 536.461394][T22066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4083'. [ 536.496960][T22052] tipc: Enabled bearer , priority 0 [ 536.611343][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 536.618156][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 536.645735][T22075] openvswitch: netlink: Flow actions attr not present in new flow. [ 536.664857][T22051] tipc: Resetting bearer [ 536.701837][T22051] tipc: Disabling bearer [ 537.427497][T22108] __nla_validate_parse: 4 callbacks suppressed [ 537.427524][T22108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4095'. [ 537.444922][T22108] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 537.485874][T22101] can: request_module (can-proto-5) failed. [ 537.593326][T22118] netlink: 'syz.3.4100': attribute type 3 has an invalid length. [ 537.603984][T22117] syzkaller1: entered promiscuous mode [ 537.619894][T22117] syzkaller1: entered allmulticast mode [ 537.630570][T22117] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.4099'. [ 537.651430][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 537.657912][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 537.751013][T22131] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 537.758344][T22131] IPv6: NLM_F_CREATE should be set when creating new route [ 537.765652][T22131] IPv6: NLM_F_CREATE should be set when creating new route [ 537.873060][T22142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4107'. [ 537.887010][T22142] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4107'. [ 537.898576][T22142] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4107'. [ 537.977930][T22147] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4110'. [ 538.102096][T22149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4111'. [ 538.114327][ T5757] IPVS: starting estimator thread 0... [ 538.202058][T22150] IPVS: using max 43 ests per chain, 103200 per kthread [ 538.286459][T22159] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.4114'. [ 538.297738][T22159] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 538.504191][T22165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4117'. [ 538.577140][T22173] openvswitch: netlink: Missing valid actions attribute. [ 538.616391][T22173] lo speed is unknown, defaulting to 1000 [ 538.624492][T22173] lo speed is unknown, defaulting to 1000 [ 538.636634][T22173] lo speed is unknown, defaulting to 1000 [ 538.821044][T22191] IPVS: length: 136 != 8 [ 538.985401][T22191] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 539.044093][T22173] infiniband syz0: set active [ 539.048938][ T1241] lo speed is unknown, defaulting to 1000 [ 539.062957][T22173] infiniband syz0: added lo [ 539.091078][T22173] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 539.164494][T22173] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 539.196112][T22173] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 539.236562][T22173] RDS/IB: syz0: added [ 539.252230][T22173] smc: adding ib device syz0 with port count 1 [ 539.268249][T22173] smc: ib device syz0 port 1 has no pnetid [ 539.283077][T22173] lo speed is unknown, defaulting to 1000 [ 539.301183][ T3108] lo speed is unknown, defaulting to 1000 [ 539.574110][T22236] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4129'. [ 539.598213][T22173] lo speed is unknown, defaulting to 1000 [ 539.611356][T22236] nbd: must specify at least one socket [ 539.889750][T22173] lo speed is unknown, defaulting to 1000 [ 540.124333][T22173] lo speed is unknown, defaulting to 1000 [ 540.398830][T22173] lo speed is unknown, defaulting to 1000 [ 540.674459][T22173] lo speed is unknown, defaulting to 1000 [ 540.771685][ C1] net_ratelimit: 6 callbacks suppressed [ 540.771705][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 540.783872][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 540.978467][T22173] lo speed is unknown, defaulting to 1000 [ 541.811471][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 541.818069][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 542.851506][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 542.857968][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 543.891853][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 543.898314][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 544.941493][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 544.947978][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 545.197385][T10964] ------------[ cut here ]------------ [ 545.202974][T10964] wlan1: Dropped data frame as no usable bitrate found while scanning and associated. Target station: 08:02:11:00:00:00 on 5 GHz band [ 545.216787][T10964] WARNING: net/mac80211/tx.c:757 at ieee80211_tx_h_rate_ctrl+0xbd5/0x1760, CPU#0: kworker/u8:61/10964 [ 545.227816][T10964] Modules linked in: [ 545.231774][T10964] CPU: 0 UID: 0 PID: 10964 Comm: kworker/u8:61 Not tainted syzkaller #0 PREEMPT(full) [ 545.241548][T10964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 545.251752][T10964] Workqueue: events_unbound cfg80211_wiphy_work [ 545.258092][T10964] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xc46/0x1760 [ 545.264611][T10964] Code: bf 09 00 00 48 8b 44 24 10 8b 30 45 31 ed 83 e6 07 41 0f 95 c5 31 ff e8 08 b8 a3 f6 43 8d 4c 6d 02 48 89 df 4c 89 f6 4c 89 e2 <67> 48 0f b9 3a 41 bd 01 00 00 00 e9 dd 01 00 00 e8 a5 b3 a3 f6 48 [ 545.284310][T10964] RSP: 0018:ffffc900055874a0 EFLAGS: 00010293 [ 545.290448][T10964] RAX: ffffffff8b224258 RBX: ffffffff90430cd0 RCX: 0000000000000005 [ 545.298546][T10964] RDX: ffff88802d440d44 RSI: ffff8880563d9998 RDI: ffffffff90430cd0 [ 545.306590][T10964] RBP: ffffc90005587610 R08: ffff888048b32abf R09: 1ffff11009166557 [ 545.314635][T10964] R10: dffffc0000000000 R11: ffffed1009166558 R12: ffff88802d440d44 [ 545.322758][T10964] R13: 0000000000000001 R14: ffff8880563d9998 R15: dffffc0000000000 [ 545.330828][T10964] FS: 0000000000000000(0000) GS:ffff88812527c000(0000) knlGS:0000000000000000 [ 545.339958][T10964] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 545.346614][T10964] CR2: 00007f2e6e7ea2f8 CR3: 000000002b43e000 CR4: 00000000003526f0 [ 545.354659][T10964] Call Trace: [ 545.357969][T10964] [ 545.360940][T10964] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 545.367114][T10964] ? ieee80211_is_bufferable_mmpdu+0x103/0x200 [ 545.373364][T10964] invoke_tx_handlers_late+0xb5/0x1830 [ 545.378877][T10964] ? sta_info_get+0x2ec/0x300 [ 545.383661][T10964] ? invoke_tx_handlers_early+0xa30/0x1cf0 [ 545.389613][T10964] ieee80211_tx+0x2d7/0x4b0 [ 545.394229][T10964] ? __pfx_ieee80211_tx+0x10/0x10 [ 545.399304][T10964] ? ieee80211_set_qos_hdr+0x1d8/0x530 [ 545.404869][T10964] ? ieee80211_xmit+0x2e5/0x3c0 [ 545.409773][T10964] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 545.415840][T10964] __ieee80211_tx_skb_tid_band+0x50f/0x680 [ 545.421739][T10964] ? ieee80211_scan_state_send_probe+0x4e6/0xa00 [ 545.428137][T10964] ieee80211_scan_state_send_probe+0x5b3/0xa00 [ 545.434415][T10964] ieee80211_scan_work+0x488/0x1ab0 [ 545.439676][T10964] cfg80211_wiphy_work+0x29e/0x420 [ 545.444900][T10964] ? process_scheduled_works+0xa20/0x14e0 [ 545.451093][T10964] process_scheduled_works+0xa8e/0x14e0 [ 545.456779][T10964] ? __pfx_process_scheduled_works+0x10/0x10 [ 545.462828][T10964] ? do_raw_spin_lock+0x12b/0x2f0 [ 545.467909][T10964] ? assign_work+0x3cf/0x5d0 [ 545.472582][T10964] worker_thread+0xa47/0xfb0 [ 545.477217][T10964] kthread+0x388/0x470 [ 545.481350][T10964] ? __pfx_worker_thread+0x10/0x10 [ 545.486497][T10964] ? __pfx_kthread+0x10/0x10 [ 545.491099][T10964] ret_from_fork+0x514/0xb70 [ 545.495765][T10964] ? __pfx_ret_from_fork+0x10/0x10 [ 545.500907][T10964] ? __switch_to+0xc89/0x1420 [ 545.505661][T10964] ? __pfx_kthread+0x10/0x10 [ 545.510291][T10964] ret_from_fork_asm+0x1a/0x30 [ 545.515135][T10964] [ 545.518189][T10964] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 545.525482][T10964] CPU: 0 UID: 0 PID: 10964 Comm: kworker/u8:61 Not tainted syzkaller #0 PREEMPT(full) [ 545.535125][T10964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 545.545188][T10964] Workqueue: events_unbound cfg80211_wiphy_work [ 545.551506][T10964] Call Trace: [ 545.554804][T10964] [ 545.557737][T10964] vpanic+0x56c/0xa60 [ 545.561733][T10964] ? __pfx__printk+0x10/0x10 [ 545.566368][T10964] ? __pfx_vpanic+0x10/0x10 [ 545.570876][T10964] ? is_bpf_text_address+0x292/0x2b0 [ 545.576188][T10964] ? is_bpf_text_address+0x26/0x2b0 [ 545.581425][T10964] panic+0xc5/0xd0 [ 545.585174][T10964] ? __pfx_panic+0x10/0x10 [ 545.589611][T10964] ? ret_from_fork_asm+0x1a/0x30 [ 545.594575][T10964] __warn+0x315/0x4c0 [ 545.598590][T10964] ? ieee80211_tx_h_rate_ctrl+0xbd5/0x1760 [ 545.604461][T10964] ? ieee80211_tx_h_rate_ctrl+0xbd5/0x1760 [ 545.610298][T10964] __report_bug+0x331/0x530 [ 545.614837][T10964] ? arch_stack_walk+0x11b/0x150 [ 545.619801][T10964] ? ieee80211_tx_h_rate_ctrl+0xbd5/0x1760 [ 545.625638][T10964] ? __pfx___report_bug+0x10/0x10 [ 545.630696][T10964] ? stack_depot_save_flags+0x33/0x800 [ 545.636182][T10964] report_bug_entry+0x19a/0x290 [ 545.641063][T10964] ? ieee80211_tx_h_rate_ctrl+0xc46/0x1760 [ 545.646894][T10964] ? ieee80211_tx_h_rate_ctrl+0xc4b/0x1760 [ 545.652726][T10964] handle_bug+0xce/0x200 [ 545.657041][T10964] exc_invalid_op+0x1a/0x50 [ 545.661579][T10964] asm_exc_invalid_op+0x1a/0x20 [ 545.666451][T10964] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xc46/0x1760 [ 545.672892][T10964] Code: bf 09 00 00 48 8b 44 24 10 8b 30 45 31 ed 83 e6 07 41 0f 95 c5 31 ff e8 08 b8 a3 f6 43 8d 4c 6d 02 48 89 df 4c 89 f6 4c 89 e2 <67> 48 0f b9 3a 41 bd 01 00 00 00 e9 dd 01 00 00 e8 a5 b3 a3 f6 48 [ 545.692528][T10964] RSP: 0018:ffffc900055874a0 EFLAGS: 00010293 [ 545.698628][T10964] RAX: ffffffff8b224258 RBX: ffffffff90430cd0 RCX: 0000000000000005 [ 545.706710][T10964] RDX: ffff88802d440d44 RSI: ffff8880563d9998 RDI: ffffffff90430cd0 [ 545.714706][T10964] RBP: ffffc90005587610 R08: ffff888048b32abf R09: 1ffff11009166557 [ 545.722847][T10964] R10: dffffc0000000000 R11: ffffed1009166558 R12: ffff88802d440d44 [ 545.731026][T10964] R13: 0000000000000001 R14: ffff8880563d9998 R15: dffffc0000000000 [ 545.739051][T10964] ? ieee80211_tx_h_rate_ctrl+0xc38/0x1760 [ 545.744906][T10964] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 545.751006][T10964] ? ieee80211_is_bufferable_mmpdu+0x103/0x200 [ 545.757194][T10964] invoke_tx_handlers_late+0xb5/0x1830 [ 545.762688][T10964] ? sta_info_get+0x2ec/0x300 [ 545.767397][T10964] ? invoke_tx_handlers_early+0xa30/0x1cf0 [ 545.773238][T10964] ieee80211_tx+0x2d7/0x4b0 [ 545.777769][T10964] ? __pfx_ieee80211_tx+0x10/0x10 [ 545.782841][T10964] ? ieee80211_set_qos_hdr+0x1d8/0x530 [ 545.788329][T10964] ? ieee80211_xmit+0x2e5/0x3c0 [ 545.793208][T10964] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 545.799220][T10964] __ieee80211_tx_skb_tid_band+0x50f/0x680 [ 545.805060][T10964] ? ieee80211_scan_state_send_probe+0x4e6/0xa00 [ 545.811425][T10964] ieee80211_scan_state_send_probe+0x5b3/0xa00 [ 545.817663][T10964] ieee80211_scan_work+0x488/0x1ab0 [ 545.822991][T10964] cfg80211_wiphy_work+0x29e/0x420 [ 545.828132][T10964] ? process_scheduled_works+0xa20/0x14e0 [ 545.834230][T10964] process_scheduled_works+0xa8e/0x14e0 [ 545.839828][T10964] ? __pfx_process_scheduled_works+0x10/0x10 [ 545.845845][T10964] ? do_raw_spin_lock+0x12b/0x2f0 [ 545.850901][T10964] ? assign_work+0x3cf/0x5d0 [ 545.855521][T10964] worker_thread+0xa47/0xfb0 [ 545.860143][T10964] kthread+0x388/0x470 [ 545.864232][T10964] ? __pfx_worker_thread+0x10/0x10 [ 545.869365][T10964] ? __pfx_kthread+0x10/0x10 [ 545.873971][T10964] ret_from_fork+0x514/0xb70 [ 545.878585][T10964] ? __pfx_ret_from_fork+0x10/0x10 [ 545.883718][T10964] ? __switch_to+0xc89/0x1420 [ 545.888418][T10964] ? __pfx_kthread+0x10/0x10 [ 545.893030][T10964] ret_from_fork_asm+0x1a/0x30 [ 545.897823][T10964] [ 545.901467][T10964] Kernel Offset: disabled [ 545.905806][T10964] Rebooting in 86400 seconds..